System and Method for Communicating Product Recall Information, Product Warnings or Other Product-Related Information to Users of Products

ABSTRACT

An automated system and method for communicating product information to consumers through a central computer using a distributed computer network. The central computer is connected to a plurality of public health and product recall information sources through a public network such as the Internet. Consumers purchasing or otherwise linked with products submit product information to the central computer. The central computer establishes a link between the user and associated product information and stores the data in a database. User medical information is also submitted to and retained by the central computer. Upon receipt of product update information, which may include recall notification or other product warnings from the public health or product recall information sources, the central computer accesses the database and identifies user-product links impacted by the product update information and automatically initiates electronic or other communications to affected users.

RELATED APPLICATIONS

This application is a Continuation of application Ser. No. 12/591,779filed Dec. 1, 2009, now U.S. Pat. No. 8,473,313, which is a Continuationof application Ser. No. 09/778,762 filed Feb. 8, 2001, which in turnclaims priority from, and the benefit of, U.S. provisional applicationSer. No. 60/182,000 filed Feb. 11, 2000, hereby incorporated in itsentirety by reference.

FIELD OF THE INVENTION

The present invention relates to a system and method for communicatingproduct recall information, product warnings, or other product-relatedinformation to users of such products, and more specifically, relates toa system and method that facilitate implementation of an electronic andnetwork-based recall and notification system that is product-drivenand/or biological variable-driven, to assist the users of the system intimely identifying a health hazard or any other hazardous situation ordifficulties due to unintended harmful effects and adverse consequencesof a variety of products and/or biological variable, and to prevent theoccurrence of such harmful effects.

BACKROUND

The world, especially the United States, is now facing a challengingrise in health care costs. Health care expenditures are rising rapidly.Contributing to this rise, there has been with a rapid increase in thenumber and spread of preventable illnesses and injury that areattributable to the unintended harmful effects of a variety of productsand/or changes in the health status of an individual interacting withsuch products. According to projections by the Health Care FinancingAdministration of the United States Department of Health and HumanServices, health care spending as a share of US gross domestic product(GDP) is estimated to increase from 13 percent to close to 20% of theUnited States GDP after the year 2000. This clearly demonstrates howunwise health care spending can affect the overall economy of a nation.The World Health Organization reported in 1995 that the percentage oftotal spending on health by various governments clearly indicated thathealth care costs are a serious global problem and an important factorconcerning the overall utilization of public money. Public spending onhealth by the United States government was about 47%, by the UnitedKingdom was 84%, by France was 81%, by Japan was 78%, by Canada was 71%,by Italy was 70%, by Mexico was 56%.

The United States Department of Agriculture has estimated that themedical costs of illnesses caused by the unintended harmful effect offood alone amounted to over $34 billion dollars in 1998 (more than thecombined global revenues in 1998 of Coca-Cola and Microsoft). It is easyto appreciate the threat to a nation's economy that such a situationpresents. This, however, is only a fraction of the total medical costcreated by the unintended harmful effect of products. The unintendedharmful effect of prescription drugs, for example, resulted in anastonishing annual cost of $136 billion dollars in the United States.This is greater than all of the costs incurred as a result of heartdisease (the number one cause of death in the United States). The abovemedical costs attributable to the unintended harmful effects ofprescription drugs is more than the combined global revenues of allmajor airlines in the United States, England, Germany, Japan, France andSpain, which totaled $120 billion U.S. dollars in 1998. The situation ismuch more serious and inconceivably far more costly when the harmfuleffects of other consumer products are considered. This ultimatelyimposes a tremendous burden on the income tax payer and average worker,who at the end is the one paying for the vast majority of the costsassociated with health care services. The fastest and most effective wayto protect the public from an unsafe product and thus decrease suchoutrageous and unwise medical expenditures would be to timely andreliably identify, locate, and instruct the users of such unsafeproducts. Due to the seriousness of the harm and the rapidly increasingnumber of occurrences of harm and death caused by a variety of products,the government, private enterprises and medical organizations have anurgent need to find means and technology to prevent the spread andoccurrences of illnesses and injuries that result from a failure totimely identify, locate, and treat users of harmful products. Theability to satisfy this need is critical to the containment of healthcare spending, not only in the United States, but also globally.

The development and use of a variety of medications (drugs) is essentialto promoting health and treating a great number of disorders, whilesubstantially increasing life expectancy. There are many benefits to thedevelopment of medications. Certain antibiotics, for example, have savedmillions of lives. Antihypertensive drugs likewise have helped reducethe number of occurrences of strokes and heart disease, by controllinghigh blood pressure. The use of cholesterol lowering agents also havehelped decrease the mortality rate associated with heart disease, theuse of anti-depressants have helped millions of individuals better enjoylife, and the use of anti-glaucoma medications have helped millions ofpatients preserve their sight. The exhaustive process and laboriousresearch involved with drug development have created many otherbreakthroughs and formidable drug discoveries which, in turn, have ledto the control of previously untreatable diseases and a decrease inmorbidity, while enhancing the quality of life and increasing lifeexpectancy for millions of people across the world. However, these greatbenefits are associated with serious and costly problems due to theastonishing fact that not only thousands, but actually hundreds ofthousands of patients die every year in the United States alone, as aresult of drug reaction or unexpected and unintended adverse effects andreactions caused by prescription drugs.

Adverse drug reactions resulting from correctly administeredFDA-approved drugs alone are responsible for the shocking figure of over106,000 deaths per year in the United States alone. Adverse drugreactions are the fourth leading cause of death in the United States,immediately after heart disease, cancer, and stroke. The number ofdeaths caused by the harmful unintended effects of prescription drugs isamazingly more than the annual totals for AIDS, suicide, and homicidecombined, and amount to more than twice the number of deaths due toaccidents (which is about 40,000 per year). A person is more likely todie from an adverse effect of prescription medication than fromaccidents, diabetes, or lung disease. The staggering number of close to300 deaths per day resulting from prescription drug adverse reactionsremains unchanged due to the difficulties in timely identifying,locating, preventing use of the medication by, and treating theindividuals at risk. In addition to the fatal events, there aretypically over 2.2 million annual occurrences of non-fatal, but serious,reactions, and millions of complications and disabilities related tounexpected effects of drugs, chemical compounds and a variety ofproducts which are responsible for some of the staggering health carespending that the world faces today. Unfortunately, this alarmingpicture will continue to worsen in the future, with devastatingconsequences to the economy, tax-payers and society as a whole ifappropriate measures for prevention and the timely identification andlocation of the harmful products and affected individuals is notinstituted to avoid spreading of potentially preventable injuries anddisease.

The above catastrophic picture is even more grim and astonishing sincethe above figures exclude drugs which were improperly prescribed orimproperly administered, as well as drug abuse and drug overdose andadverse effects caused by non-prescription drugs (over-the-countermedications), devices and other chemical compounds which are injected,ingested, or placed in or on the human body. If the adverse effects andfatal reactions related to the use of over-the-counter drugs(non-prescription drugs) and other products such as cosmetics wereincluded the numbers would prove to be even more staggering. The risks,injury, and death caused by unintended adverse drug reactions anddefective products could be substantially reduced if appropriatetechnology were implemented to provide the requisite notification,guidance, treatment, or the like.

The misuse of prescription and non-prescription drugs due to theinability to understand or identify a potential hazardous effect is alsoa critical cause of morbidity and mortality related to the utilizationof a variety of products, devices, and chemical compounds. The abilityto understand information about drugs, chemical compounds or devices iscentral to the prevention of some of the aforementioned devastatingconsequences. The U.S. Department of Education estimated that 47% of alladult Americans had poor reading and comprehension skills. Large amountsof medical material therefore can exceed the reading abilities of manyAmerican adults. Although there is information printed on the packagesand product inserts that accompany prescription and over-the-counterdrugs, as well as many other products, the majority of the populationhas difficulty understanding, interpreting, or using the informationprovided. As a result, many individuals suffer adverse effects due totheir inability to understand the content of the information provided bythe manufacturer and its relationship to his/her individual healthstatus. It is important to remember that the health status of anindividual is a dynamic process with continuous change over time. Suchchanges in the health status are quite capable of potentiallyinteracting with chemical compounds and devices used by the patient andcausing serious and even fatal effects and reactions. New technology issurely needed that will assist the user in safely using a drug despitehis/her lack of knowledge regarding medical terminology and theinteraction of drugs and products with the human body's continuouslychanging biological variables.

The prior art has provided several important home-testing technologies.Examples include several devices developed by the Applicant hereof. Suchdevices can be used by patients to self-administer measurements of eyepressure and perform a complete non-invasive blood analysis thatincludes evaluation of a variety of biological variables. Heretofore,there has been no convenient and reliable way of associating suchhome-testing devices with a notification, guidance, and/or treatmentsystem, to provide a complete system of preventing negative interactionbetween chemical compounds used by the patient and changing biologicalvariables of the patient. There is consequently a need for such asystem. A brief example demonstrates the situation. Patients using somemedications for the common cold or flu or products containing steroidsmay be at risk for damaging their eyes or even blindness if onebiological variable, in this case, eye pressure is significantlyincreased. The increase in eye pressure can be silent, without anysymptoms that would otherwise indicate that the individual may haveglaucoma. The packet insert of the common cold pill and some skinlotions with steroids may have a warning against use of such products bythose with glaucoma. Unfortunately, however, the person taking the pillsor using the skin lotion typically does not know what glaucoma means,even after reading the packet insert, and will continue to use theproduct not knowing that there is a risk of eye damage. There isconsequently a need for a system that will alert patients about suchrisks, regardless of the patient's knowledge of the meaning of themedical terminology in the packet insert and/or potential interactionwith their health status and current biological variables.

The rapid rise in health care costs also relates to the disturbing factthat millions of patients suffer from severe complications, permanentdisability, and death as a result of untimely identification of a healthproblem or untimely arrival at the medical provider or hospital. Themedical costs associated with such untimely treatment cannot beoverstated. There is consequently a need for a system that, in additionto preventing the harmful event from occurring, also can alert the userto seek treatment and arrange for treatment when such treatment becomesnecessary as a result of injury or illness caused by a harmful productand/or changing biological variables.

Many adverse effects and reactions resulting from the use of chemicalcompounds and/or devices occur after the chemical compounds or devicesare already in the marketplace and being used by potentially millions ofconsumers. The pre-marketing trials conducted during the evaluationprocess of drugs and devices frequently are not sufficient to reliablydetect adverse effects and reactions and lack the requisite length offollow-up which is needed to evaluate the delayed consequences thatmanifest themselves only after chronic use or wide spread administrationof drugs and devices. In addition to the limits associated withpre-marketing evaluation by the United States Food and DrugAdministration (FDA) of drugs and devices, these trials do not includeevaluation of the interaction of drugs with a variety of biologicalvariables, nor do they involve evaluation of the result of use byspecial population groups that can be at a higher risk for adverseeffects or reactions, when compared to the general population.Furthermore, the inability to identify the changes that occur in thehealthy status of an individual such as changes in blood pressure, eyepressure, blood glucose, blood cholesterol, weight, and the like, makeit virtually impossible to identify and prevent adverse reactions oreffects that occur with the utilization of drugs and/or devicesinteracting with changing biological variables.

In order to identify and thus prevent the catastrophic complications dueto the adverse effects of drugs, chemical compounds and devices thatwere not identified during pre-marketing evaluation, a post-marketingsurveillance system has been instituted by the FDA. The sample size ofthe typical pre-marketing trial is small, with a short follow-up, whencompared to the use of the drug by the general population in whichthousands and even millions of patients will use the drug or devices fora long period of time with the consequent development of drug reactions.The post-marketing surveillance represents an attempt to address thislimitation and relies on spontaneous reporting by health care providersand companies of adverse effects or reactions which were associated withthe use of the chemical compounds, devices, cosmetics, or the like. Thepost-marketing surveillance system, however, includes no system ormethod adapted to directly alert the patients at risk. Thepost-marketing surveillance system instead relies basically on thephysician informing patients on an individual basis. This isaccomplished at the doctor's discretion and using his/her availableresources. The primary objective of the post-marketing surveillance isto alert the health care provider and companies, but no system is ineffect to directly address the individual user and all users of theharmful product.

The adverse events or reactions that result from the use of drugs,devices, cosmetics, or the like can occur during different stages of use(e.g., shortly after initiation of use, after long term use, and evenmuch later, after the drug, chemical compound or device has beendiscontinued and/or recalled). Moreover, for each one report received bythe FDA, it is estimated that there may be over 100 actual reactions.This demonstrates that the post-marketing surveillance reporting systemused by health care providers substantially underestimates the actualnumber of adverse reactions and effects. Unfortunately, the most commonway for a patient to discover that a product is harmful is after theyhave suffered injury or even death caused by the harmful product.

Besides the unintended detrimental effects caused by drugs and/ordevices, the use of medications or devices may be associated withunintended beneficial effects. The post-marketing surveillance systemalso attempts to identify those beneficial effects and was key inidentifying that hormonal therapy in post-menopausal women reduces deathfrom cardiovascular disease, and that oral contraceptive users have alower risk of ovarian cancer. There is consequently a need for a systemand method that individually informs all of the users of a beneficialeffect related to the particular drugs they are using.

The post-marketing surveillance system and prior art currently usedsuffer from many limitations and drawbacks, and is unable to efficientlyidentify, locate, prevent, and treat the unintended harmful effects of avariety of products after the product has been identified as harmful, asthe above numbers clearly show and some of the following examples willfurther demonstrate.

A drug that was widely advertised on television by the name Loratadineand which is used to treat allergies, was found during post-marketingsurveillance to cause esophagus rupture with even potentially fatalcomplications. The unexpected reason for this complication wasidentified as the size of the tablet for a particular formulation. Thetablet was too large and caused blockages and subsequent potentialrupture of the gastrointestinal tract. As a result of rupture, causticgastrointestinal contents poured into the mediastinum and the surface ofthe heart, potentially leading to the demise of the patient. Althoughthere was a great effort by the government and manufacturer to notifydoctors and patients about this catastrophic event, many patients had noway of learning that their particular formulation of Loratadine couldcause these completely unexpected complications, unless they wereinformed by their doctors or, in a few occasions, through the media. Dueto the widespread use of this drug and the obvious difficulties inlocating and alerting patients, astonishingly even after theannouncement to doctors and the public by the FDA and the manufacturerabout these devastating complications, patients unfortunately still wereusing the drug.

Another similar situation occurred with the antihistaminic drug calledTerfenadine, which was subsequently found to cause potentially fatalarrhythmia when taken with certain antibiotics. In many cases, evenafter a drug has been discontinued and/or recalled, patients still usethe recalled drug and are injured because it is virtually impossible fordoctors, companies, and even the government to locate and inform allusers of a particular drug about the complications. Drugs used bypatients are usually manually written onto patients' charts. It would benecessary to manually review the thousands of charts for every medicalpractitioner and subsequently identify written information on the chartregarding different medications used by each patient. Since in mostcases there is no indication about the date that a certain patient wasstarted on a particular medication, this chart review would have toinclude the hundreds of pages that each chart may have. Of course thiswould have to be done any time a new adverse effect was identified forthe drug as well as a new harmful drug was identified. Naturally, thisis an insurmountable task. The data for each patient to be identified,located, and warned about the potential hazardous situation isimpossible to retrieve in any practical manner. Sometimes the productdoes not need a prescription which makes the direct identification andlocation of the user impossible using existing record-keepingtechniques. The problem is further demonstrated by a situation involvinga shampoo capable of treating dandruff. That shampoo was later found tocause fatal reactions, blindness, diabetes, and other severecomplications because of certain ingredients in its composition. Sincethis product was being sold over-the-counter without the need for aprescription, there is no way to identify who is using this extremelydangerous shampoo, even though it has been recalled and removed from themarket. Users therefore continue to perish and suffer because they donot have access to the information on the hazards posed by the shampoo.

Unfortunately, the most common way that a user finds out about thepotential harmful effects of product is by suffering the illness, injuryor death caused by the harmful product. The above are only a fewexamples of real events that occurred in connection with such products.There are many other products causing harm and being recalled everyyear.

The picture is unfortunately more shocking and alarming when we considerthe fact that defective products cause a similar amount of injury asdescribed above, and even deaths as the following example will show. OnMay 12, 1998, a 17-month-old toddler died when his portable cribcollapsed and strangled him at a licensed day-care facility in Chicago.The loss of a young child is surely irreparable, but more difficult toaccept is the fact that it could have been prevented. Most astonishingis the fact that the portable crib that killed the young child had beenrecalled in 1993, five years earlier, by the United States ConsumerProduct Safety Commission (CPSC) and by the manufacturer. Neither theparents nor the day-care provider were aware of the recall. The cribcollapsed wedging the toddler's neck inside the folded V of the railsand killing the child in one of the most horrifying ways, the inabilityto breath. The child was prevented from breathing and could not cry forhelp during the last minutes of his life. This same type of crib hadalready strangled and killed many children, but the availablenotification methods and system were inefficient and incapable oftracking, identifying, locating, and alerting the user about apotentially harmful and even deadly product. Although the recall waspublicized several times, primarily through the news media, ads andother conventional, printed means, the message reached a very limitedportion of the population and, even today, this deadly product is stillpresent in many homes. It is important to remember that strangulation ifnot fatal, can lead to brain damage and a lifetime of nursing andinstitutional care for those unfortunate toddlers. There is consequentlyan increase in health care costs associated with these defectiveproducts, not to mention the emotional toll.

The following illustration will further demonstrate the inefficiency ofexisting systems and methods in recalling, tracking, and locatingalready known harmful drugs and other consumer products. Within weeks ofthe death of the aforementioned child, his parents began an urgent andmassive e-mail campaign “Prevent death of next child” warning of thedanger of the recalled portable cribs with the message being forwardedall over the U.S. and the world. The parents founded “Kids In Danger”, acharitable organization that warned millions of people in the U.S. andabroad about the dangers of recalled juvenile products by grantinginterviews to print, radio and television media and through E-mail andprinted warning campaigns. The message reached various organizations,such as the American Academy of Pediatrics and other major medical andpublic organizations. Many of the respondents had a recalled crib butwere not aware of the danger. Some of the responses to the e-mail postedby “Kids in Danger” demonstrate the magnitude of this alarming problem.The following are examples of such responses:

1). “The dissemination of recall information is horribly lacking. Wehave called all of the manufacturers of the equipment we use with ourchildren and discovered that the carrier of our stroller has beenrecalled because it flips children out of the seat; we returned thewarranty card over a year ago, when we purchased the stroller, and stillwere not notified of the recall. It is certainly clear now that parentsand child care providers and state agencies need to be proactive inchasing this information down”

2). “I think it's bad that we have to really research in order to findout if a product we bought is considered safe. That safety seems to bean ever-changing line, does it not? I grieve with the families that havesuffered; it is senseless.”

3). “I read the newspaper every day. I never heard about this danger tomy children until now.”

This outstanding organization, “Kids in Danger”, issued a press releaseurging a far-reaching advertising campaign and began a nationwidetelevision and print media campaign and also distributed public safetyannouncements to radio and television stations nationwide, encouragingconsumers to call the CPSC to verify whether products in theirpossession have been recalled for safety problems. The massivenationwide and international e-mail campaign as well as massive mediaannouncement, associated with extensive government actions that occurredafter the death of the above-mentioned child were important and helpful,but unfortunately inefficient and limited by the existing systems andtechniques for notification. Even after all of those efforts, the sameneedless tragedy happened again, On Aug. 19, 1998 (only 3 months afterthe aforementioned death), another innocent baby was killed by the sameproduct in Fair Haven, N.J. The second baby was killed in the sameterrifying manner. He was strangled to death when the same model ofportable crib collapsed and crushed his throat. Unfortunately, thepotentially life-saving recall information about the deadly crib neverreached this innocent child's parents. It is clear that the commonlyused systems and methods of notifying consumers suffer from severelimitations. It is incapable of reliably recalling and/or locatingharmful products and the users of such harmful products.

Interestingly state inspectors had visited the day-care a week beforeone of the foregoing children died. The day care center's manager alsohad no idea the crib had been recalled. Despite a recall initiative bythe City of Chicago, and the efforts of others, only about 15% of the1.5 million portable cribs and play yards that were recalled, wereactually accounted for. Thus, more than 1.2 million defective cribsremain in circulation. This further demonstrates the inefficiency andlimitations of the existing notification and recall methods and systems.

According to Consumer Reports 99Buying Guide “the odds of your hearingabout an unsafe product are slim. Manufacturers are reluctant to issue arecall in the first place because they can be costly. And getting theword out to consumers can be haphazard.” Likewise, according to the Kidsin Danger organization, the only way to be certain that you are notusing a recalled product is to check for yourself and periodically checkwith these government and private agencies about new recalls.Unfortunately, there is no commonly available method or system thatactively searches and notifies individually and privately the user forall of the unique products that such users utilize and that informs theuser about warnings/recalls for all the products being used by thatindividual user.

There are also web-sites that send undiscriminating and random recallinformation for virtually all recalled products, but it is obviouslyimpossible and absolutely inappropriate to randomly send thousands ofe-mails every day for each user with the user having to waste anincredible amount of time every day to sort through all of the thousandsof daily messages received in order to identify a potentially harmfulproduct that the particular user happens to be using. Furthermore, evenif the user identifies among the thousands of daily messages the name ofone product being used, the user would have to know if that particularproduct being used came from the plant or lot or section or processingarea that corresponds to the product being recalled. The user then wouldhave to check each package individually to try to find out if he/she hasobtained a recalled product. There is consequently a need for a systemor method that actively searches for the user and individually informsthe user about a recalled product according to precise identificationcharacteristics of the product such as processing plant, section, andthe like. Since it is not practical or even appropriate to sendthousands of daily messages to each of the millions of users, existingnotification schemes select and send one message randomly to the user.There are clear limits and drawbacks to such a scheme. The individualuser, for example, cannot afford the significant time, effort, andexpense needed to sort through the millions of recalled products to findout which products being used by that user were actually previouslyrecalled and to seek the warning information for each and every productbeing used by that user. Moreover, the user does not want to beinundated with the millions of recalls and warnings that do notcorrespond to the products being used by that user. Moreover, thisindiscriminate e-mailing has proven to be unable to reach the user of aharmful product in a timely fashion, as the situation with the deadlycrib demonstrated, with the tragic death of a second innocent child.

Notably, the existing notification systems tend to be user-based. Thatis, the user ultimately has to actively search for the recall andwarning information about the products being used. Such systemstherefore are not product-based and product-driven. There is a need,however, for a product-based and product-driven system and method,wherein an active search is conducted for all of the individual users ofa particular product and the specific user of the unique productpassively waits for the information about used products to reachhim/her. In this regard, there is also a need for a method and systemthat provides such information to the user as soon as it becomesavailable.

In 1998 alone, the CPSC recalled more than 38 million individual unitsconcerning harmful children's products. However, because most peoplenever hear about these recalls, the majority of the recalled harmfulproducts are still being used. CPSC usually relies on the media, printedmaterial and manufacturers to recall harmful products voluntarily andmost of the manufacturers cooperated. This, however, falls well short ofguaranteeing effective results. During the past decade, 622 childrenhave died in defective cribs, a rate of 57 children per year. Inaddition, at least 137,000 children were hurt. This translates to a rateof almost 400 child injuries per day. CPSC uses various means to informthe public. These include local and national media coverage, publicationof numerous booklets and product alerts, a web site, a telephoneHotline, a Fax-On-Demand service, the National Injury InformationClearinghouse, and the CPSC's Public Information Center. There also areseveral web-sites and other means that publicly announce recalledproducts. However, they are not sufficient as the figures show. There isconsequently a need for new means and technology capable of preventingthose tragic events.

According to a CPSC spokesman, recalls also depend heavily on thecooperation of the news media. In the case of the aforementioned crib,the agency issues new press releases every time a child dies in thecrib. The crib is also included in the agency's “recall roundup,” anannual news release that lists some of the most dangerous recalledproducts. The CPSC issues hundreds of press releases every year,including video news releases for television stations. This furtherdemonstrates the long-standing need for a system capable of alertingusers of potentially harmful products and thereby preventing injury.

Companies also are trying desperately to track and identify the recalledproducts as can be seen by another press release issued by themanufacturer of the deadly crib, after the death of the second baby inAugust of 1998. “This is a terrible tragedy we had hoped to prevent whenwe voluntarily recalled the Playskool Travel-Lite crib in 1993 andimmediately began extensive public awareness efforts to urge consumersto stop using the products”, an officer of the company said in hiswritten statement. The manufacturer said that they franticly have doneeverything possible to recall the cribs after the death in May 1998. Thecompany has, in fact, extensively advertised using all means, writtendirectly to pediatricians and to all J. C. Penney catalog customers;mailed posters to stores that carried the cribs; set up a toll-freetelephone hot line; and offered consumers $60 for the return of eachcrib (the cribs originally sold for about $89 each). Of course, all ofthat was not enough and one more child, among the many who died, wasstrangled to death, and the tragedy repeated.

Another critical issue related to the recall system currently used isthe negative impact on the general reputation of business. Thisindirectly discourages companies from putting forth their best effortsto recall defective products. According to the United States CPSC,underreporting products that could cause injury or death is a veryserious problem. This business concern, however, arises primarilybecause of the means by which both the CPSC and manufacturers inform thepublic. Typically, the news media and other forms of mass publicdisclosure are used. The bad publicity through the media has adevastating financial impact on the manufacturer of the recalledproduct. According to studies by Paul Rubin, former chief economist forthe CPSC and professor of economics at Emory University, a company loses7% of its revenues after each recall. It is easy to recognize thefinancial disaster faced by companies and the economy of the nation ingeneral when the current, public means are used to alert users ofpotentially harmful products. There is consequently a need for a systemand method capable of privately and individually alerting the user abouta recalled and/or harmful product.

The current way of recalling also is very expensive. It therefore isdifficult for companies to exert aggressive recall efforts. The federalgovernment likewise is reluctant to impose too many restrictions onmanufacturers because it could put hundreds if not thousands ofcompanies out of business with the consequent uncontrolled increase inunemployment and the catastrophic effect on the economy of the nation.Although the government is to some extent charged with theresponsibility of ensuring safety and protecting the population, thegovernment is faced with a complex and perplexing challenge. It mustbalance the interest of safety on the one hand, against its interest inavoiding the consequences of forcing companies to spend money to recallproducts and to publicly advertise more aggressively their recalls ofpotentially harmful products (which could lead to increases inbankruptcy and the consequent irreparable damage to the economy of thenation). There is consequently a need to solve these problems associatedwith conventional recall techniques, by providing a system and methodcapable of privately and individually identifying, locating, andinforming all users of a recalled product.

To find 10 deadly products that were sold to 10 out of 100 millionpotential purchasers is a daunting and currently virtually impossibletask. Thus, 10 people can die because of the deadly effect of theharmful recalled products. Thus, there is a need for a system and methodcapable of individually identifying each particular product that isbeing recalled and the particular users of the product, and providing awarning to such users. This need for a system of identifying and warningall users of such potentially harmful products extends to one that, inaddition to the savings in terms of lives, injury and costs providedthereby, can be implemented in a cost-efficient manner.

Recently, there has been an increase in the number of foods and otherproducts that are imported and that are more likely to cause unintendedharmful effects. Moreover, public sector spending on the consequences ofadverse drug reactions is expected to accelerate since prescriptiondrugs grew at double-digit rates during the last few years. Thisacceleration in prescription drug use can be attributed, at least inpart, to the number of new life-saving drugs entering the marketplace,increased consumer demand induced by drug manufacturer advertising, andan increase in the number of prescriptions filled. It is expected that,in the year 2000, each American will use an average of 8 to 9 drugs.This will increase life expectancy and enhance quality of life, but alsowill cause unintended harmful effects. Besides rising utilization(number of prescriptions), there also will be an increase in intensity(including changes in size and mix of prescriptions) that, in turn, willlead to a greater risk for reactions. It will be virtually impossible toslow the growth on national health expenditures if there is no way toefficiently, privately, and timely identify, locate, prevent and provideguidance regarding potential injury and illness due to unintendedharmful effects of products. For extended care, both nursing home andhome health expenditures are expected to grow, as more people becomedisabled due to the unintended harmful effects of a variety of products.Left uncorrected, the number of injuries, illnesses and deaths due tothe lack of timely identification and location of users of defective,contaminated products, and drug reactions, as well as illnesses causedby food, will boost the demand for medical services, exponentiallyincrease health care costs, and cause significant increases in incometax to compensate for the rising cost of health care. There isconsequently an urgent and vital need for technology that can privately,individually, timely, continuously, confidentially, reliably and/orcost-effectively track, identify, locate, inform and alert all of theusers of potentially harmful products. It is also extremely desirable tohave a system that returns only specific information relevant to theindividual user of a unique product, and not random and/or massinformation about a variety of products that do not relate to the user,thus avoiding the unnecessary transfer of information and documents thatare not relevant to the user, and making it more practical andconvenient (therefore more likely) for the user to become consciouslyaware of the warning.

SUMMARY

It is a primary object of the present invention to overcome at least oneof the foregoing problems by providing a system and method forcommunicating product recall information, product warnings, or otherproduct-related information to users of such products. The presentinvention facilitates implementation of an electronic and network-basedrecall and information system that is product-driven and/or biologicalvariable-driven, to assist the user of the system in timely identifyinga health hazard or any other hazardous situation or difficulties due tounintended harmful effects and adverse consequences of a variety ofproducts and/or biological variables, and to prevent the occurrence ofsuch harmful effects. In this regard, the present invention can providea way of preventing the spread and continuation of such harmful effects,for example, by tracking, identifying, and locating dangerous products,and/or by tracking, identifying, and locating the adverse reactions andadverse effects of drugs, medical devices, food, cosmetics and otherconsumer products. The present invention therefore allows appropriateaction and preventive measures to be taken with respect to thepotentially hazardous situation. It can do this by privately, timely,individually, and cost-efficiently locating and alerting the users atrisk and/or by providing guidelines to assist such users before anydifficulties, damage or injury occurs. According to the presentinvention, this can be achieved using a portable device into which datais entered using, for example, bar-code technology. The portable devicecan be associated with a computer-based system in which the informationon harmful products is continuously updated by recall and informationsources and is automatically transmitted over a public network and/orthe Internet. The transmission of such information on harmful productscan be performed using a server that receives, retrieves, stores andsends the information on recalled products to a user identified as beinga user of such recalled products. The server also can store theinformation for later retransmission to other users who subsequentlyenter data indicating that they are users of such recalled products.

Advantages and objects of the present invention can be achieved byproviding a completely automatic, electronic, and network-based recalland information system for a variety of products, for interaction amongproducts and/or biological variables adapted to prevent and control anyharmful effects of products by providing electronic data communicationsof such recalls and information. The communication system preferablyincludes an electronic hand-held portable terminal and a networkinformation system. The portable terminal can include a device capableof acquiring product identifiers and/or biological variables. Thenetwork information system can be adapted to assist the user in timelyidentifying a health hazard or any other hazardous situation orcomplications due to unintended harmful effects and adverse consequencesof a variety of products and/or biological variables, as well as toprevent the occurrence of the harmful effects and to prevent the spreadand continuation of such harmful effects. It can do this by tracking,identifying and locating potentially harmful products and the users ofsuch harmful products, and by alerting and informing such users aboutthe adverse reactions and adverse effects of drugs, medical devices,food, cosmetics, other consumer products, and the like. This allows theusers of such products to take appropriate action with respect to apossible unintended harmful effect of such products, preferably using asystem that can privately, individually, timely, continuously,confidentially, reliably and cost-effectively track, identify, locateand alert all of the users of potentially harmful products with a verylow cost, electronically-based arrangement.

The apparatus and methods of the present invention can include anelectronic and Internet-based recall system comprising hardware,firmware and software. The system can utilize a database of potentiallyharmful product utilization and variables such as objective biologicalvariables, and/or objective factors which alter a biological variable,with the objective data, as well as product usage information, beingacquired, processed, and transmitted using a computer-based systemintegrated with a public network such as the Internet, for purposes ofprecisely locating a user exposed to a hazardous situation in a timelymanner, and delivering information/instructions regarding such ahazardous situation or potentially hazardous situation. Preferably, anautomated and automatically adjusted and updated system is provided in areliable and cost-effective manner and is capable of timely andprecisely locating and warning a user at risk or exposed to apotentially hazardous situation.

According to a preferred embodiment, the present invention provides aproduct-based and product-driven system in which reliable productinformation is used to actively search for all of the individual usersof a unique product and all users of products acquire information oneach and every product they use, preferably in a passive manner (i.e.,the users need not actively seek the information), wherein the acquiredinformation comprises recall information, information regardingpotentially harmful effects, and/or information regarding beneficialeffects for each and every product used. The product informationpreferably is delivered instantaneously as soon as the informationbecomes available. The product recall and warning information for all ofthe products utilized by each user, in this regard, searches for andfinds the user, rather than requiring the user to find the recall andwarning information through his/her own efforts.

In accordance with another preferred embodiment, the invention providesa product-based and biological variable-based system having a location,information and recall system that preferably provides electronictransmission of data via the Internet. The product-based and biologicalvariable-based system includes a portable hand-held device (or otherwiseportable unit) that can be carried by the user. The portable hand-heldunit preferably stores data related to unique product identifications.This data can be acquired, for example, from optically encoded symbolsand then can be transmitted to a remotely located central server that isadapted to receive and store the user's product data and a username andalso is adapted to receive and store information from remote recall andinformation sources such as government agencies, private institutionssuch as medical institutions, manufacturing companies, and the like. Thesystem allows a plurality of users who have product information storedin a database of the central server on their behalf to update andtransmit information to the database using a public network, such as theInternet, and to receive feedback information on the products stored inthe database. The computer server can send information and warningsabout the products for which data is stored in the database, as soon assuch information or warnings are received, to all of the users of theproducts. These warnings or information can be sent via electroniccommunication means, preferably through the Internet. The hand-helddevice carried by the user provides a record of all of the productsbeing utilized by that user and biological variables, which record canbe transmitted to the central server by the hand-held device. The systemis described herein using the terms username, IP (Internet protocol)address, domain name address, and full Internet address interchangeablyto denote a specific confidential address of a user of a product. Thecombination of the various networks, computer units, users, server(s),and recall and information sources that defines the location,communication and information system according to the principles of theinvention is referred to herein as a GPI System (General ProductInformation System) or Intelligent Systems for Recall and Notification.Any variable that can be measured in a living tissue, for the purpose ofthe description, is referred to herein as a biological variable orbiometric information. Factors which alter biological variables includeany physical or chemical action or interaction with/to living tissuethat causes any change in, on, or surrounding the living tissue. Anychemical compound that alters any biological variable or any livingtissue is referred to herein as a drug. Any network of computers, forthe purpose of the description, may be referred herein as the Internet.User, consumer, customer and patient, for the purpose of thedescription, herein are used interchangeably and denote a living beingat risk of harm or death caused by the unintended harmful effect of aproduct.

It is another object and advantage of the invention to provide a novelelectronic recall system that can precisely identify all of the users ofa harmful product.

It is still another object and advantage of the invention to provide anovel electronic recall system based on electronic communications viathe Internet.

Yet another object and advantage of the invention is to provide anelectronic information and location system that can privately andconfidentially locate and alert the users of a harmful product.

It is still another object and advantage of the invention to provide anelectronic and network-based information and location system that canindividually locate and alert the user of a harmful product.

It is still another object and advantage of the invention to provide anelectronic and network-based information and location system that cantimely locate and alert a user of one or more harmful products.

It is a further object and advantage of the invention to provide asystem in which a recall database is continuously updated and items ofthe database are automatically transmitted electronically.

Still another advantage and object of the invention is to provide asystem in which the user of the harmful product can be located andinformed about the potential hazard, but the user can remain anonymousthroughout the process of tracking and locating the user, and receivingand using the information.

A further advantage and object of the present invention is to provide asystem that is continuously updated with the latest product-relatedinformation available to the users of potentially harmful products.

It is yet a further advantage and object of the present invention toprovide a system that provides only proven information from reliablesources about the products utilized by the user or biological variablesacquired by the user.

It is another advantage and object of the invention to provide an alertsystem in regards to the interaction between dynamically changingbiological variables and products as well as product-to-productinteraction, with timely identification of the hazard and subsequentinstitution of treatment or prevention measures specifically tailoredfor the individual user of a particular product.

Yet another advantage and object of the present invention is to provideguidelines and instructions to assist the user of a potentially harmfulproduct before any insult, illness or injury occurs.

It is also an advantage and object of the present invention to providean information system not only about the newly found harmful features ofproducts, but also the newly found beneficial features of products.

It is also another advantage and object of the invention to provide anelectronically-based cost-effective system for recalling harmfulproducts.

It is still another advantage and object of the invention to provide areporting system in which the users can report any harmful event thatoccurred with the use of the product and/or any product contamination,labeling concerns, or questionable product stability.

It is yet another object and advantage of the preset invention toprovide a confidential alert system that protects against the financialdisaster that invariably occurs to companies which rely on publiclyannounced recalls.

It is also an object and advantage of the present invention to providean economically practical way for government agencies and privatecompanies to implement their recall programs.

Another object and advantage of the present invention is to provide asystem that can assist the user in identifying substances that the usershould avoid without requiring the user to read all of the chemicalingredients described in the label of a product.

It is still another advantage and object of the invention to provide asystem that informs the user of the existence of alternative productswhich do not interact with drugs being used and/or the biologicalvariables of the user, and to inform the user about alternative productswhich may be beneficial to the user according to the information aboutthe user.

It is still a further advantage and object of the invention to provide asystem that offers an opportunity for the user to replace or purchase analternative product as a replacement to the recalled product.

It is yet a further advantage and object of the invention to provide asystem that interfaces with credit card clearing houses and/orretailer's product information storage and processing medium.

It is yet a further object to provide a system with a bar code-based ormagnetic-based Safety Card.

It is still a further object of the invention to provide a system thatautomatically informs credit card users or swipe card users aboutrecalled products purchased using said cards.

It is still a further object and advantage of the invention to provide asystem capable of assisting government agencies in their efforts tolocate plants that potentially do not have good manufacturing practices,so that such plants can be inspected.

It is yet a further object and advantage of the invention to provide asystem to assist government agencies in identifying and locatingimported products for collection of samples and inspection.

It is still a further object and advantage of the invention to provide atime-efficient and orderly system of the types described above, usingoptically encoded symbology.

It is still another advantage and object of the invention to provide alow-cost and simple to use hand-held portable unit that can beuniversally and unrestrictedly utilized.

It is yet another advantage and object of the invention to provide anovel electronic recall and information system with a hand-held portableunit that can be used by hearing impaired or visually impaired users.

It is still another object and advantage of the invention to provide asystem with information cards and smart cards with extended storagecapabilities for the tracking, identification and location of a user ofa potentially harmful product.

It is another object and advantage of the invention to provide acommunication and information system in which the user communicates witha server and receives instantaneous information as to whether such auser is utilizing a recalled product and what level of hazard ispresented to the user by exposure to or use of such a product.

Another object and advantage of the present invention is to provide asystem in which the users who seek warning or recall information receiveonly information about the specific products being used, to therebyavoid being inundated with meaningless and/or random product warninginformation.

Another object and advantage of the present invention is to provide asystem that can electronically receive not only text but also image datarelated to information about the harmful product being used.

Another object and advantage of the present invention is to provide asystem that is coupled with the most reliable and updated informationsources including government agencies, manufacturers, and the like.

It is a further object and feature of the invention to provide a systemfor the complete delivery of health care in response to the effects ofharmful products, for example, by contacting and dispatching emergencymedical services, scheduling an appointment, laboratory testing, and/orother diagnostic testing, prescribing and delivering drugs, andproviding insurance approval.

Another object and advantage of the present invention is to provide asystem that optimizes the interaction among the pharmacy, insuranceagencies, and the user.

Another object and advantage of the present invention is to provide asystem that uses non-subjective biological, medical, treatment, anddiagnostic data and variables.

It is still a further advantage and object of the invention to provide atracking, location and identification system that allows specificallytailored information to be delivered to the user.

It is a further object and feature of the invention to provide a systemin which a hand-held portable device can communicate with anotherhand-held portable device.

It is still another object and advantage of the present invention toprovide a system that allows the timely intervention and treatment ofdiseases before complications or/and unintended harmful effects occur.

It is a further object and feature of the invention to provide aninteractive system for home monitoring and self-measuring devices.

It is still a further object and advantage of the invention to provide asystem capable of incorporating data entry peripheral devices andcoupling with various home-use data acquisition and transmissiondevices, as well as home-monitoring devices, and to provide a systemthat can communicate with a variety of processing devices.

Another object and advantage of the preset invention is to provide acompletely paperless system for recalling harmful products.

It is also an object and advantage of the preset invention toalternatively provide a system that can receive handwritten input dataand voice input data, in addition to data that preferably is opticallyencoded.

It is still a further object and advantage of the present invention toprovide a system with an acoustic coupling arrangement that couples thehand-held device with telephone lines to establish a direct connectionwith a central server and create a two-way telephone communication link.

It is still another object and advantage of the present invention toprovide a hand-held device of the type described above that can beattached to a second module, such as a home measuring device.

It is yet another object and advantage of the present invention toprovide a system wherein the hand-held device can communicate directlywith the central server by telephone lines, optical means, radiofrequency links and the like, in order to locate, identify, and informthe user of a harmful product.

The above and other objects and advantages will become more readilyapparent when reference is made to the following description taken inconjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic diagram of one exemplary embodiment of a dataprocessing system according to the present invention.

FIG. 2 depicts in more detail a computer system in accordance with theembodiment in FIG. 1.

FIGS. 3A and 3B are a perspective view and a block diagram,respectively, of a portable unit according to an exemplary embodiment ofthe present invention.

FIG. 3C is a front view of an exemplary keypad of the portable unitillustrated in FIGS. 3A and 3B.

FIG. 4 is a schematic view of an exemplary embodiment of the portableunit when provided with a wireless connection to health monitoringdevices, according to a preferred embodiment of the present invention.

FIG. 5A is a block diagram of an exemplary general product informationsystem according to the present invention.

FIG. 5B is a block diagram of a general product information systemsimilar to that of FIG. 5A but implemented using a portable unit,instead of a desk-top personal computer, and showing an exemplary screenthat can be displayed by the portable unit.

FIGS. 5C through 5J are schematic views of exemplary implementations ofpoint-of-transaction systems for gathering product data using a swipecard or smart card, according to the principles of the invention.

FIG. 5K is a block diagram depicting an exemplary embodiment of apoint-of-transaction system.

FIGS. 5L through 5N are flow charts illustrating an exemplary sequenceof operating steps that can be used when transferring productidentifiers and acquiring information related to such productidentifiers, according to a preferred embodiment of the presentinvention.

FIGS. 5P and 5Q are block diagrams of an exemplary connection between athird party server and the central server according to preferredembodiments of the present invention.

FIG. 6 is a block diagram depicting an exemplary embodiment of a centralserver according to the present invention.

FIGS. 7A and 7B are a menu diagram illustrating exemplary product recalland information menus that can be displayed in an open display window ona user's personal computer in accordance with the embodiment depicted inFIG. 6.

FIGS. 8A through 8C are schematic views of an exemplary memoryarrangement according to the principles of the invention.

FIG. 9 is a block diagram showing an exemplary embodiment of a centralserver in accordance with the embodiment shown in FIG. 8.

FIG. 10 is a flow chart illustrating initial processing according to theprinciples of the invention.

FIGS. 11A through 11L are flow charts illustrating an exemplary sequenceof operating steps that can be used when transferring productidentifiers and acquiring information related to such productidentifiers.

FIGS. 12A through 12E are flow charts illustrating an exemplary sequenceof operating steps that can be used when transferring biologicalvariables and acquiring information related to such biologicalvariables.

FIGS. 13A and 13B are flow charts illustrating an exemplary sequence ofoperating steps that can be used when acquiring information from remotecomputers according to the principles of the invention.

FIGS. 14A and 14B are flow charts illustrating another exemplarysequence of operating steps that can be used when acquiring informationfrom remote computers according to the principles of the invention.

FIGS. 15A and 15B are flow charts illustrating another exemplarysequence of operating steps that can be used when acquiring informationfrom remote computers according to the principles of the invention.

FIG. 16 is a flow chart illustrating steps that can be performed whendata is acquired by the portable unit.

FIGS. 17A through 17C are flow charts illustrating exemplary steps thatcan be performed when acquiring, deleting or using product data providedby the portable unit.

FIGS. 18A through 18C are flow charts illustrating exemplary steps thatcan be performed when acquiring, deleting or using biological variabledata provided by the portable unit.

FIGS. 19A and 19B are flow charts illustrating exemplary steps that canbe performed when removing data via the portable unit.

FIGS. 20A and 20B are flow charts illustrating an exemplary sequence ofoperating steps that can be performed when removing data via the centralserver according to the principles of the invention.

FIG. 21 is a block diagram illustrating a system adapted to acquire dataand transmit data between IECLD units, according to an exemplaryembodiment of the invention.

DETAILED DESCRIPTION

With reference to FIG. 1, a preferred embodiment of the presentinvention provides an electronic communication, information, andlocating system, generally designated by the reference numeral 1, forrecalls and information on products and biological variables. The system1 is capable of preventing and controlling the unintended harmfuleffects of products. The electronic communications provided by thesystem 1 preferably are carried out using packet technology via theInternet 100. The system 1 preferably includes a main central server 10connected to a variety of entities and computers via the Internet 100(or via any other suitable network such as telephone lines 19, wiredmeans 18 and wireless means 16 including private virtual networks). Thecentral server 10 also can be coupled to one or moremicroprocessor-based hand-held portable units 40. The portable unit(s)40 preferably are implemented with bar code reading capabilities.

The embodiment depicted in FIG. 1 includes a central computer thatserves as the central server 10 and that is associated with a pluralityof remote computers, generally designated by the reference numeral 20,and as well as a plurality of computer systems 30. Some or all of thecomputer systems 30 can be associated with respective ones of theportable units 40 via wired 18 a or wireless 16 a means. Each portableunit 40 preferably is implemented using a hand-held, programmable,microprocessor-based unit. The microprocessor-based portable units 40can be coupled to health monitoring devices 50. The combination of theforegoing units with their respective functions provides an exemplaryembodiment of a General Product Information (GPI) system 1 according tothe present invention. The system 1 thus can include Recall andInformation Sources (RIS) computing units 60, Providers of Health Care(PHC) computing units 70, the aforementioned computer systems 30 (e.g.,provided as personal computers), portable computer units 40,home-measuring devices 50, the Internet 100, and data input and outputdevices such as keyboard(s) 15, display(s) 22, and the like(collectively referred to as interactive devices 15,22). The user 90 maybe human, but also can be another computer application which interactswith interactive devices 15,22 or the like, to send information and/orreceive information to/from the central server 10. The RIS units 60 andPHC units 70 preferably connect to the Internet 100 using high-speed T1or T3 connections. Each portable unit 40 or computer system 30 canconnect to the Internet 100 using a conventional communicationsinterface (e.g. a modem with suitable software, and the like).

The computer system 30 can be physically embodied in a workstation or acomputer terminal, as well as conventional personal computers, such asdesk-top computers, lap-top computers, hand-held computers, PersonalDigital Assistants, electronic organizers, cellular phones, televisionunits, web-based TV or virtually any suitably configured computation orelectronic equipment that can be connected to the Internet 100 ortelephone lines 19, or wired means 18 or wireless means 16 for thetransfer of information to the user 90, which information includes dataregarding uniquely identified products and/or biological variablesaccording to the principles of the invention. As mentioned above, acellular phone as well as a watch can be used to receive automaticupdates about recalled and/or harmful products and can act as thecomputer system 30 of the invention. While the Internet-based system ispreferred, the portable unit 40 and the computer system 30 also canconsist of any computation or electronic means capable of transferringand receiving information on uniquely identified products and/orbiological variables according to the principles of the invention

The hand-held portable unit 40 will be described hereinafter as anIndividual Electronic Communicator and Locator Device (IECLD 40).According to an exemplary embodiment of the IECLD 40, the IECLD 40 isconnected by the Internet 100 to a main central server 10 that isprotected by a suitable firewall 23. The IECLD 40 shown in FIG. 1comprises a portable hand-held microprocessor-based unit with a keypad12 for selection of product categories and a bar code reader wand 14.The IECLD 40 is adapted to acquire, process, and transfer data. It isunderstood, however, that the IECLD 40 can operate while coupled with acomputer system 30, preferably of the type described above. The IECLD40, in addition to having the keypad 12, can be provided with a wirelessinput device 16 b for use when inputting or entering a unique identifiercode for individual products used by uniquely identified users 90. Theunique product codes preferably are optically encoded (e.g., as a barcode element 150). Although the preferred embodiment includes the IECLD40 for purposes of acquiring and entering information, it is understoodthat the users 90 of the product can enter the product data and userdata directly into their computer systems 30 using a keyboard 15 forsubsequent transmission to the central server 10.

In this disclosure, the central server 10 will be referred to as theGeneral Product Information (GPI) and the source and informationentities will be referred to as remote computers 20 or more particularlyas Recall and Information Sources (RIS) 60 whereas the providers ofhealth care entities are referred to as Providers of Health Care (PHC)70.

The system 1 includes the central server 10 (or GPI). The central server10 can be located remotely from the computer system 30. The centralserver 10 acquires, receives, retrieves, stores, searches, processes,transfers and connects the data and/or information on products and/orbiological variables to/from the user 90 and/or to/from other RISentities 60 and PHC entities 70. Preferably, this is accomplished viathe Internet 100. The central server 10 can establish communicationchannels with the RIS 60 and PHC 70. The central server 10 also isprogrammed to handle electronic transfer of data, including conventionale-mail, and has data storage and processing capabilities for storing andprocessing the pertinent data. To facilitate this process, the server 10can be provided with multiple modems and telephone lines coming into itthrough which data is transferred. It is understood, however, that otherphysically wired telephone lines, or wireless communication links, suchas cable, satellite transmission, radio transmission, opticaltransmission, and the like, as well as conventional telephone phonelines or digital telephone lines, and other electronic transmissionmeans or any electronic transmission over the Internet 100 or anyhigh-speed Internet connection can be used by the central server 10 (orGPI) as a communications medium. The central server 10 (or GPI)preferably contains software, firmware and hardware capable of carryingout any requisite protocols, such as search applications that are wellknown. The other units of the system 1 preferably comprise devices (suchas modems and the like) that enable communications with other units, aswell as programs that facilitate implementation of protocols accordingto the principles of the invention. The GPI system 1 includesinformation retrieval engines for text and multi-media files and iscapable of performing searches through the stored database. The GPIsystem 1 also can include search engines that search the World Wide Weband equipment to connect the user to web sites related to the searchtopic. It is understood that the invention is not limited to anyparticular types of hardware and software, nor is it limited to anyparticular method of communication, inasmuch as there are virtuallyendless combinations of technology that can be employed to carry out thepresent invention.

While the central server 10 (or GPI) is shown schematically in thedrawings as one single unit, it is understood that a plurality ofnetworked computers can be employed. This, in turn, allows continuationof service in the event of a hardware failure of a server 10. It alsoallows the use of larger storage and processing capabilities. Thecentral server 10 (or GPI) operates as the central database where allthe unique usernames, unique product identifier codes, biologicalvariables, product and user information, recall/warning information,harmful effects of products, beneficial effects of products, andproduct-to-biological variable interaction information andproduct-to-product interaction information are maintained. The storedinformation can be made available to the user 90 electronically via theInternet 100 or by conventional, physically wired means 18, wirelessmeans 16, or the like.

In the embodiment shown in FIG. 1, the user 90 inputs productidentifying information regarding products that are being used,preferably by acquiring the product identifying information fromoptically encoded symbols (e.g., using a bar code reader 14), andelectronically transmits this information to the central server 10 (orGPI), preferably through the Internet 100. The product identifyinginformation can be transmitted as a unique identifier for thatindividual product, along with an indication of the unique particularuser 90 who is or will be using the identified product. The latterindication can be provided using a unique username. The central server10 (or GPI) transfers information to/from Recall and Information Sources(RIS) 60 and to/from the users 90 of the product while acquiringinformation from the RIS 60 on products. This information is acquiredbased on the transmitted product identifier. As shown in FIG. 1, theproduct identifier preferably is derived from a unique bar code number150 that is applied to or otherwise associated with each product. Thesearch of the RIS 60 can be performed using automated processorsaccording to applications described hereinafter, which applicationsinteract with and search the Internet 100 and remote computers 20according to the product identifier. The user 90 thus can provide theunique product identifiers, as well as values for biological variables,to the central server 10 by way of a communication medium such as theInternet 100. The values or other data indicative of the biologicalvariables and product identifiers can be stored in the central server 10(e.g., in a database of the server 10, as will be described hereinafter)according to the principles of the invention.

When the invention is implemented using the IECLD 40, the unique barcode number 150 for the particular product being used is acquired usingthe bar code reader 14 present on the IECLD 40. The bar code number 150representing a unique product identifier then can be converted to abinary number and transmitted using a suitable communication interfaceto one of the computer systems 30. The binary number derived from thebar code number 150 can be stored at the computer system 30. The productidentifying information then can be transmitted to the central server 10(or GPI), where it can be stored in a memory device (or database) of thecentral server 10 (or GPI) under the user's name (e.g. under a usernamewith a full Internet address being used to identify the user).Alternatively, the binary number can be transmitted directly from theportable unit 40 (or IECLD) to the central server 10 (or GPI). Everytime a new product is used, the data on the product is acquired,transmitted, and stored in the database of the central server 10 underthe username of the individual who is submitting the individual productcode.

FIG. 1 also shows the various entities and sources that can be connectedto the central server 10 (or GPI) via a communications network.Preferably, as shown in FIG. 1, the central server 10 (or GPI) isconnected to remote computers 20, which include RIS, at government andprivate agencies/institutions in the U.S. and abroad, such as, theUnited States FDA 130 (Food and Drug Administration), the United StatesCSPC 132 (Consumer Safety Product Commission), the United States EPA 134(Environment Protection Agency), the United States CDC 136 (Centers forDisease Control), the United States Department of Agriculture (USDA)138, United States National Institutes of Health (NIH) 140, UnitedStates Department of Health and Human Services (HHS) 142, the WorldHealth Organization (WHO) 144 as well as international and domesticagencies and institutions 146 (such as, for example, but not limited tothe Japanese Ministry of Health and Welfare, Canadian Food InspectionAgency, German Federal Institute for Drugs and Medical Devices, FrenchAgency for Medicine, the Pharmaceutical Inspectorate in Belgium, the“Secretariat de Salud” in Mexico, the Ministry of Health in Brazil) aswell as the U.S. Department of Energy, the U.S. Department ofTransportation, and the like. The central server 10 (or GPI) also isconnected to other RIS remote computers 60, for example, computersoperated by the manufacturers/distributors 148 of the products for whichinformation is stored in the database of the central server 10 (or GPI),medical institutions 152, research facilities 154, public computerterminals (PCT) 156, pharmacies 151, the Federal Trade Commission 153,hospitals 155, and the like. The above named various entities relate tothe sources for recall and information relating to the products storedin the memory medium of the central server 10 (or GPI). For purposes ofthis description, such entities are collectively referred to herein asRecall and Information Sources 60 (RIS). The RIS computers 60 connectedto the central server 10 (or GPI) facilitate implementation of thepresent invention by providing a reliable source of proven informationabout the products being used. The PCT 156 or Public Computer Terminalmentioned above, for the purpose of the invention, is a computer systemlocated in a public place through which anyone can transfer data onproducts being used to the central server 10 (or GPI).

FIG. 1 shows the central server 10 (or GPI) connected to the computersfor the various RIS 60 via particular links to a communications network(e.g., the Internet 100). The central server 10 (or GPI) also isconnected via the Internet 100 to a personal computer 30 of a user 90 orto the portable IECLD 40 of the user 90, with the central server 10 (orGPI) acquiring up-to-the-minute updates on the products stored in thecentral server 10 database from the institutions and agencies describedabove as RIS 60. Although each block is labeled as a particularentity/entities or user, the present invention can be implemented usingany computing device that performs the computations and communicationsthat are carried out by the entity/entities and/or users. FIG. 1 alsoshows the central server 10 (or GPI) as being connected to remotecomputers 20 which include the various providers of health care 70(i.e., PHC entities). The PHC 70 include one or more insurance companies71, one or more emergency medical services (EMS) 72, one or more medicalinstitutions (MI) 73, one or more doctor's offices (DR) 74, one or morelaboratories (LAB) 75, and/or one or more pharmacies (PH) 76. It isunderstood that the central server 10 (or GPI) can operate as a webserver for both receiving and transmitting product identifiers and/orproduct information to/from the user 90 and to/from the RIS 60 andto/from the PHC 70 including searching/retrieval for both text andmultimedia files related to the product identifier and/or biologicalvariable.

An exemplary embodiment of the system also includes home-monitoringdevices herein described as health monitoring devices (HMD) 50interfaced with the IECLD 40. The interface preferably is a wirelessinterface 16 through which data can be transmitted. Examples of thehome-measuring devices 50 include those patented and/or developed by theApplicant hereof, as well as other devices that are known in the art ofhome health monitoring and/or doctor's office monitoring. More specificexamples of such devices are a self-tonometer for home-measurement ofeye pressure 52, a non-invasive blood analysis device 53, a continuoustemperature monitoring device 54, a conventional electronic, at-home,blood-pressure monitoring device 55, and a conventional electronic scale56. In addition, the HMD 50 can include a microfluidics-basedintelligent contact lens 57, and/or as shown in FIG. 4, a heart rateand/or rhythm monitor 58. It is understood though that any device thatmeasures any biological variable, physical variable, chemical variablesor any device, method, or system used for the delivery of health careincluding evaluation, diagnosis, monitoring or treatment of patients canbe used in the invention as an HMD 50, including any device that has aunique identification and interacts with patients during the process ofproviding health care, such as diagnosis, monitoring and treatment(e.g., infusion pumps, catheters, ventilators, electrocardiogram (EKG)machines, and the like). The data acquired by such HMD 50 can betransmitted to the central server 10 (or GPI) and can be stored in thecentral server 10 (or GPI) for further processing and transmission ofinformation back to the user 90 according to the principles of theinvention.

Preferably, the electronic information communication system between thecentral server 10 (or GPI) and the various RIS 60 and also between thecentral server 10 (or GPI) and the user 90 provides electroniccommunications using packets of data that are transmitted via theInternet 100. These electronic communications can be performed usinghypertext markup language (HTML) or any other electronic communicationtechniques, using a public or private network as well as directpoint-to-point communication 19 via a direct log-in by the user 90 (viahis/her portable unit 40 (e.g., an IECLD 40) or his/her computer system30) into the central server 10, and/or by other electronic orconventional communication means between the central server 10 (or GPI)and the user 90 (e.g., via a private communications network, such as alocal area network (LAN), a wide area network (WAN), and the like). Theuser 90 therefore can communicate electronically with the central server10 (or GPI) via the Internet 100 or via other ones of the aforementionedconnections for information exchange using electronic or conventionalcommunication means. The HMD 50 can communicate with the central server10 (or GPI) directly by wired or wireless means, via the Internet 100,via the computer system 30 or via the IECLD 40.

The central server 10 (or GPI) also is connected to various PHCcomputers 70 to enable such PHC to deliver health care according toinformation received from the various RIS 60 and/or directly provided bythe central server 10 (or GPI) with respect to a potentially harmfulproduct. Thus, if a harmful product is known to cause a life-threateningsituation that, in turn, requires emergency treatment, the EMS 72 can becontacted and a team dispatched to the residence of the particular user90 of that harmful product (assuming that user has elected to submithis/her address or other location indicative information to the system1). If a harmful product is known to cause a medical condition thatrequires less urgent medical attention, then a doctor's office 74 ormedical institution 73 can be contacted and an appointment andtransportation arrangements can be made for that particular user of apotentially harmful product. If a harmful product is known to cause amedical condition that requires laboratory testing or further testing,then the type of tests and laboratories 75 where the tests should bedone are identified and the information sent to the particular user 90at risk of injury from use of the harmful product. If the harmfulproduct is known to require treatment with a medication or antidote,then the necessary prescription can be issued by the doctor's office 74and the appropriate pharmacy 76 can be contacted for delivery of themedications needed by the user 90 of the harmful product.

If information about a uniquely identified harmful or recalled productis received/acquired by the central server 10 (or GPI) from a sourcesuch as the FDA 130, CPSC 132 or USDA 138, then the central server 10(or GPI) searches and retrieves the usernames of all of the users 90 ofthe harmful or recalled products and preferably electronically sendsthis information by e-mail to all of the users 90 of such products. Thisinformation can include interaction information. The communicationsinvolving the central server 10 (or GPI), the RIS 60, and users 90preferably are carried out automatically by appropriately programmedprocessors according to the principles of the invention.

An autodialing or paging system 160 also is activated if the user 90 ofa product is identified as using a product that requires immediateattention, without the need for emergency equipment and EMS 72. Thedecisions on what services, if any, are needed can be based on therequisite treatment and/or methods of preventing the harmful effect of aproduct and can be based on a recommendation from the relevant RIS 60 orthe central server 10 (or GPI). A variety of other means can be used toalert the user 90 about an urgent message, such as paging, audio and/orlight signal in the computer system 30 or in the IECLD 40, and the like.These can be used in addition to, or as an alternative to, autodialing.Autodialing can include dialing of either a conventional telephonedevice or a cellular phone with the “Alert” message appearing on thescreen of said telephone devices. In this embodiment, either the GPIserver 10 does the autodialing or an authorized phone service companydoes the autodialing. The GPI server 10 or the phone service company canthen send the “Alert” message to the screen of a cellular phone as wellas to a personal computer or the IECLD 40. The GPI server 10 can beconnected to the phone company which then sends the alert messagereceived from the GPI server 10.

As illustrated in FIG. 1, multiple users can be connected to the centralserver 10 (or GPI). These users can be located in virtually any part ofthe world. They include domestic users 31, international users 32, aswell as one or more web-supported sites 33 of the central server 10 (orGPI). These can be used by anyone to enter and send to the centralserver 10 (or GPI) via the Internet 100 information regarding theharmful effects encountered with products, thus creating an additionalcollection system for identifications of potentially harmful products.When appropriate, this information on harmful effects can be sent to thevarious RIS 60 by the central server 10 (or GPI).

The central server 10 (or GPI), besides receiving information from thevarious RIS 60, also can be provided with application programs that areadapted to search for information on the products which are stored inthe various RIS 60, as well as applications adapted to search for theproduct identifications and usernames stored in the database defined inthe memory of the central server 10 (or GPI). If a product is found tobe harmful, or is recalled based on information transmitted or acquiredby the central server 10 (or GPI), then the central server 10 (or GPI)can identify and retrieve information concerning all of the users 90 ofsuch harmful product(s). This retrieval can be based on the brand nameof the product, or preferably, according to the product's unique codeidentification number. If there are any matches between usernames andthe brand name or unique code number of the product being recalled, thenthe central server 10 (or GPI) automatically retrieves the relevantusernames or code numbers of all of such users 90 of the harmfulproduct, and attaches the information about the hazards and instructionsrelated to the harmful product to an “Alert” message. The central server10 (or GPI) then electronically transmits to all of the users 90 of theharmful product the alert and information about the product, preferablyutilizing conventional bulk e-mail software or via other electronic andconventional communication means. In addition, or alternatively, thecentral server 10 (or GPI) can transmit the information to the user'sweb-based e-mail address when the web-based e-mail is supported by thecentral server 10 (or GPI). The information transmitted to the user 90can include textual and/or multimedia documents stored in the centralserver 10 (or GPI) and also can include the information/documents thatcan be accessed via the overall system 1 and stored at one or moreremotely located computers 20. Likewise, the information can relate to afile that connects to another web site when that web site has theinformation concerning the harmful product.

Whenever the user 90 sends information to the central server 10 (orGPI), as part of an application and registration process, the user 90 isautomatically registered with the central server 10 (GPI) web-basede-mail. Preferably, any product identifications or values of biologicalvariables that are sent by any user 90 automatically causes that user tobecome registered with the central server 10 (or GPI) and its web-basede-mail, and allows the user 90 to have immediate and confidential accessto the information on the potentially harmful or beneficial effects ofthe unique products being used. Any time information on a harmfulproduct is sent to the central server (or GPI) from the various RIS 60,the information is checked against the database of the central server10, and if any user 90 is identified as utilizing the harmful product,the warning message and/or instructions about that harmful product aresent to the users 90 via conventional electronic mail, or via theweb-based e-mail of the central server 10 (or GPI), and/or is sent via aweb site supported by the central server 10 (or GPI) when the user logsonto that web site and proper identification is established. Inaddition, autodialing or paging or other conventional communicationmeans may be used, in case of critical life-threatening situationsand/or in the event that no connection can be achieved via the Internet.The central server 10 (or GPI) also uses conventional keyword, naturallanguage, fuzzy logic, text engines, and other conventional searchingtools to find information requested by a user 90 who transmits data tothe central server 10 (or GPI) about a particular product and/orbiological variable, as well as to find the information on products forwhich information is stored in the central server 10 (or GPI) and whichcan be located in the various RIS 60 databases (e.g., FDA 130, CPSC 132,EPA 134, manufacturers 148, and the like). Whenever the central server10 (or GPI) is configured as a web server, conventional web browsers canbe used to transmit product identifiers and biological variables. Thesystem of the invention can use a hypermedia and graphic medium systemas information provided via the World Wide Web, with the user 90 of theinvention being able to access updated recall information on the drugsand products being utilized by that user 90 from around the world, fromany computer terminal with direct communication with the central server10 (or GPI), via the Internet by logging onto the central server 10 (orGPI) web site, by retrieving his/her e-mail in a conventional manner, orany other means to retrieve electronic data or electronic data transfer,as well as verbal messaging and e-mail with a text-to-speech electronicvoice synthesizer, and the like. The central server 10 (or GPI) can beaccessed in a variety of ways by the user 90 including via a web site onthe Internet, Internet service providers, on-line networks, direct link,and the like. The information from/to the user 90, to/from the centralserver 10 (or GPI), as well as from/to the central server 10 (or GPI),to/from the remote computers (RIS) 60 preferably uses packet technology.It also is understood that other current and emerging network protocoltechnologies can be used to carry out the invention according to theprinciple of the present invention.

The present invention provides a very cost-efficient way of sending andreceiving recall and product data using electronic information transfer.The user 90 of the GPI system 1 receives information related solely tothe product(s) being used by or otherwise linked with the user 90. Thisfacilitates better and safer utilization of the product. Government andprivate institutions can send any relevant information to the centralserver 10 (or GPI), or alternatively, the central server 10 (or GPI) canactively search for the information in the databases. The informationabout potentially harmful products thus is compared and matched to thecurrent data stored in the database of the central server 10 (or GPI),and the user(s) 90 of that particular product are identified andnotified. Whenever the government or the manufacturer issues anyinformation, warnings, or life-threatening alert about a drug orproduct, bulk web pages and bulk e-mail are transmitted by the centralserver 10 (or GPI) to all of the users 90 of the unique product relatedto the warning. This can be accomplished using conventional bulk mailingsoftware with the lists of the users of the products being derived fromthe database of the central server 10 (or GPI) which, in turn, is thedata transmitted by the plurality of users 90 using and otherwise linkedwith the product identifier. This allows appropriate measures to betaken by all of the users 90 of the unique harmful product. All of thewarning messages sent to the user(s) 90 preferably include detailedinstructions on what to do and not do concerning the product, includingweb site information related to the product as well as address, andemergency telephone numbers in case of life-threatening issues, as wellas information and/or guidance in regards to their medical condition andhow to proceed, including appointment scheduling and laboratorywork-ups.

The user 90 also can manually check and/or interrogate the centralserver 10 (or GPI) for information in regards to alert messages that arestored in the database of the central server 10 (or GPI) as well asfactors related to biological functions or factors which alter suchbiological functions related to products being used, as identified by asuitable product identifier that is transmitted to the central server 10(or GPI) by a user 90.

Any medical information of an individual is an extremely sensitive andconfidential matter, and although encryption means and otherapplications to protect against attackers can be used when transmittingthe medical data of a user, there are few, if any, ways to provide fullprotection and confidentiality. One of the features of the inventionincludes a system that keeps the name of the user of the medications andproducts confidential at all times by using an ID, as can beconventionally done when transmitting information over the Internet. Mr.XYZ, for example, can be used instead of Mr. Jones when registering withthe central server 10 (or GPI). A medication “X” therefore is NOTassociated with Mr. Gerald M. Jones who lives at 111 Main Street, butwith Mr.XYZ@GPI.org. Mr. Jones' identity as the user of the drug therebyis protected. The system of the present invention preferably uses theconventional Domain Name System which allows the user of the potentiallyharmful product to remain anonymous. The sensitive matter of what typeof drugs or products a user is utilizing thus can be kept confidential.Instead of disclosing the user's name, the information about the hazardassociated with a certain drug is sent to the user's Internet addressunder the user's Internet name and address, substantially assuring thatany required security and confidentiality is maintained throughout theprocess of using the product, retrieving information about the user ofthe product, retrieving information on the recalled products, andsending the information to the user about the recalled products. Theinformation on the recalled product is converted to the appropriateInternet communications protocol for transmission to the user of theharmful product. The system 1 uses the terms IP (Internet protocol)address, domain name address, username, and full Internet addressinterchangeably to denote a specific confidential address of a user of aproduct. Each user of any product which has its information stored inthe database of the central server 10 (or GPI) has, for example, aspecific address such as the IP address and has a username combined withthe IP address as it is conventionally done, creating a full Internetaddress. For example, Mr. Gerald M. Jones is the user of drug “X2”, hisusername is Mr. XYZ, and his full Internet address is Mr.XYZ@GPI.org.The GPI part of the domain name in the present example preferablycorresponds to the central server 10 (or GPI) attached to the Internetwhich receives the information on drugs being used. It is understood,however, that any IP address as a four-part number or any domain name orcode can be used according to the invention, as long as it uniquely andpreferably confidentially identifies the user of the various productsand drugs. The full Internet address is stored in the GPI database ofthe central server 10 (or GPI), preferably as a username or under a codeassociated with the full Internet address, and for description herein,each is preferably referred to as username. All of the codes and namesof the products used are acquired according to the principles of theinvention, then transmitted and stored under the username's code,meaning the user's full Internet address. It is also intended for thepurpose of the description herein that the terminology IP address ordomain name or full Internet address means the username combined to theIP address or the username combined to the domain name or any othermeans which uniquely identifies the user 90 of a product, though eachmay represent a different form of that username.

The central server 10 (or GPI) can be continuously updated on drug “X”by government agencies such as the FDA 130, the manufacturer 148 of thedrug, and the like. Thus, information can be received relating tomarketing surveillance by the FDA on drug “X”. Whenever there is arecall or relevant information by the FDA concerning drug “X”, thisinformation is actively or passively transferred to the central server10 (or GPI) which then searches and identifies all of the anonymoususers of drug “X” for whom information is stored in the database of thecentral server 10 (or GPI). The central server 10 (or GPI) thenelectronically sends the information and instructions on how to proceedin regards to the use of drug “X” to the user Mr.XYZ@GPI.org, and to allof the other users linked with drug “X”, without even the central server10 (or GPI) or any third parties knowing the true identity of the user.Thus, all of the users are reliably and privately identified, located,and instructed regarding drug “X”, or drug “X2” if lot X2 is the onebeing recalled.

Although the description above involves a person as the user, it isunderstood that an entity can be considered a user. In this case abusiness concern, a hospital or a doctor's office are notified about arecalled or harmful product. For instance if a EKG (electrocardiogram)was recalled, the GPI system 1 then will send the notification andinformation to the hospital and doctor's office which registered the EKGmachine with the GPI system 1.

While the system 1 can be implemented using many different components,FIG. 2 shows a preferred implementation that includes a computer system30, an IECLD 40, and at least one home-monitoring device 50. The user'scomputer system 30 includes a display device 30A, a display screen 30B,a housing 30C that encloses standard computer components, interactivedevices such as a keyboard 15, and a microphone (not shown), as well asa mouse 30D and a built-in or external modem 30F. The IECLD 40, as shownin FIGS. 2 and 3A to 3C, preferably includes a touch screen 40A (orother display 40AA), a built-in barcode reader 14, a keypad 40B, ahousing 40C (that encloses standard computer components), an externalantenna 40D (shown in FIG. 3C), an optical transceiver 40E, and a modem40F. The home monitoring devices 50 can include any of theaforementioned home-monitoring components and structure (e.g., asdescribed by U.S. Pat. No. 5,830,139; No. 6,120,460 and pendingapplications to Abreu directed to systems and methods for measuring eyepressure or blood sugar by patients at home and other diagnostic andmonitoring systems).

FIG. 2 also illustratively shows the flow of data and information to andfrom the computer systems 30, portable units 40, RIS computers 60, andthe central server 10 (or GPI), with the flow of data preferably beingcontrolled by the central server 10 (or GPI) and being routed over theInternet 100.

The central server 10 (or GPI) keeps track of all of the recallinformation provided and/or retrieved from the various RIS computers 60and then locates the unique user(s) 90 of a particular product. Thecentral server 10 (or GPI) uses standard applications to search forrecalled products and/or receives information about recalled productsfrom the various RIS 60. If a recalled product or a harmful orbeneficial effect is found, the central server 10 (or GPI) retrieves andstores the name or preferably the code number for that harmful productin its database, and then searches for usernames associated with peoplewho are using the harmful product. It also matches the code sent by theRIS 60 with the code of the products being used under the username. Ifthere are harmful product codes under one or more usernames, then theusernames are retrieved, and the level of severity or risk of the hazardis evaluated. Hazard degrees preferably are identified by a code of 1 to5. If hazard degree codes 1 to 3 are found in the warning informationreceived (1=minimal, 2=moderate, and 3=high), and an affectedusername(s) has (have) an active Internet address, then conventionalbulk e-mail software is used to electronically send the warning messageand/or web pages on the harmful product to all of the people withusernames associated with the code for the harmful product. If hazarddegree code 4 (4=critical) is found in the warning information received,then e-mail with a warning message and/or web pages on the harmfulproduct are sent, and an autodialing or paging terminal which dials allof the users of the potentially deadly product is activated to informthe users by conventional computerized voice messaging techniques aboutthe potentially fatal reactions or other problems associated with theharmful product. In this manner, the user is advised to check the GPIweb site and the GPI e-mail. If emergency care with risk for fatalreaction is present (hazard degree code=5), then the EMS 72 is contactedand dispatched, assuming the user has enabled the system 1 to obtainhis/her address.

It is understood that depending on the level of severity, a variety ofaudible and/or visible signals can be used, each of which corresponds tothe respective level of severity. Such signals can be displayed on thescreen of the computer systems 30 including the screen of a telephone orIECLD 40. When the RIS 60 transfers warning information via the Internetto the central server 10 (or GPI) concerning a newly found recalledproduct or harmful product, then the central server (or GPI) canimmediately send a request to check its database for any usernames thatare associated with the harmful product code number. When theusername(s) associated with the harmful product is identified, thecentral server 10 (or GPI) matches the usernames with the alert messageand/or web pages and sends the resulting compilation to all of the usersrepresented by the matching usernames, and according to the level ofseverity as previously described (hazard degree 1 to 5). Alternatively,if only the names of the products are used (e.g., in the case of acomprehensive recall) or when no hazard codes are available, then thecentral server 10 (or GPI) uses the name of the product and warninginformation, without a hazard code, in order to identify, locate andwarn the users of the product in the same manner as described above.

The information about products (codes and/or names) being used andstored in the central server 10 (or GPI), can be accessed only by theusers of such products. They preferably are required to enter a properidentification and password. To further assure the confidentiality ofthe information about products being used, biometric identificationdevices such as iris scanners, retinal scanners, fingerprint readers,voice recognition systems, and the like can be used to verify theidentity of the user before accessing the database of the central server10 or using the IECLD 40. The biometric data system also can be used byusers who are visually or hearing impaired. The central server 10 (orGPI) can continuously receive and/or acquire updates on products, withthe new information about the harmful products immediately beingtransmitted to the unique user of such harmful products. A menu-typemessage can be generated with the most critical hazard placed first andwith a decreasing order of severity presented when the message/warningis transmitted. Certain information, such as the cardiac effects ofproducts being used, can be stored and thus the user has the option tostore and index the particular information in the database of thecentral server 10 (or GPI) under his/her username, which enables theuser to review products which are or were used that affect the heart,and this information can be transferred to the user's doctor as well.

The central server 10 (or GPI) also checks the presence and/or values ofthe biological variables of the user and determines whether any abnormalvalues have been detected and/or whether the user has failed to complywith a prescribed schedule for monitoring of biological variables (i.e.,determining whether there has been an episode of non-compliance withtimely monitoring of biological variables). If the user has, forinstance, not sent or has not recorded blood sugar levels in the lastweek and the user is diabetic, then the central server 10 (or GPI) sendsa message to the user to inform and encourage the user to monitorhis/her blood sugar according to the time criteria set by the doctor.

The acquisition and transmission of signals corresponding to biologicaldata or factors which alter the biological data is accomplishedutilizing the hand-held portable unit 40 (or IECLD 40), with electronicdata being communicated over a public network such as the Internet tothe central server 10 (or GPI). This provides feedback informationaccording to the biological and/or product data electronically received.The electronic feedback data is automatically transmitted back to theuser's computer system 30 and/or the user's IECLD 40. It is understood,however, that any computer terminal connected to the Internet can beused by the user 90 to receive the information on biological variablesaccording to the principle of the invention.

A preferred IECLD 40 will now be described. It is understood that theIECLD 40 is preferably a portable device with bar code readingcapabilities for the input and output of data. Other forms ofinputting/outputting data, however, can be used such as a personalcomputer keyboard and the like, in accordance with the presentinvention. In addition, or alternatively, data input/output can beaccomplished using RF or optical input, or an on-screen keyboard withthe data being entered by a medical practitioner, health careprofessionals, clerks, or the users 90 themselves.

Referring to FIGS. 3A-3C and 4, a preferred embodiment of the portableIndividual Electronic Communicator and Locator Device 40 (IECLD 40)comprises a portable unit 40 which can be carried by the user andutilized by a particular individual to acquire, process, transmit andreceive information on biological variables and products being used bythe particular individual. The IECLD 40 can include a housing 40C thatcontains a conventional, programmed microprocessor 40G with dataprocessing and storage units, and which controls the operation of theportable unit 40. Communication interfaces and communication ports 40Ican be provided with the IECLD 40, as well as a built-in bar code reader14, warning lights 40H, optical transceiver 40E (e.g., exposed throughthe housing 40C and preferably working in the infrared wavelength), anda numerical keypad 40B. A modified keypad 40BB may also be provided,designed for the five main types of products that can be recalled andenabling manual selection of the type of product being scanned. The fivemain types of products are drugs, medical devices, toys and babyproducts, cosmetics, and food. A miscellaneous key 40BBB is alsoprovided. The IR optical transceiver 40E receives/transmits signals,such as biological data acquired from home monitoring devices 50. Italso is coupled with other interfaces (e.g., 40D and 40I) to transmitsignals, such as biological variables or/and product identifiers to acomputer system 30.

The computer system 30 preferably is connected to the Internet. Theportable unit 40 preferably is provided with a variety of softwareapplications and decoding elements for optically encoded symbology, witha system configuration including a scanner module for bar code reading.Alternatively, the hand-held terminal IECLD 40 may be provided withvoice input and/or voice synthesizer modules and/or means forhandwritten input data and/or typed input data and/or manual data entrywith an electronic keypad. It is understood that any type of productgroup such as, for example, household items could be used, but these areless likely to cause substantial and frequent harm and increased healthcare costs as compared with the above main five categories preferablyused (drugs, cosmetics, food, baby/toy products, medical devices,), andsuch other types of products are included under miscellaneous. It isintended that any variations or group products could be selected withkeypads or using a touch screen addressing other group products, or thedevice preferably may have all products stored by product, according totheir identifier numbers. Alternatively, the device can be programmed toaddress particular groups of products such as, but not limited to,automotives, appliances, furniture, lighting products, outdoor products,clothing, electronic devices, electrical devices, environmental productssuch air conditioners, household products, sports/exercise, and soforth.

The block diagram of FIG. 3B shows an exemplary IECLD 40 comprisingcommunication ports 40I, a power source 40J, a conventional modem 40Fwhich can be connected to the central server 10 via electronic orconventional communication means, an RF transceiver/modem 40L coupled toan antenna 40D for wireless transfer of data, non-volatile RAM memory40M, I/O ports 40N, an optical transceiver 40E, an optical sensor/barcode reader 14 with decoding devices 14B, visual indicators (e.g.,warning lights 40H) and audible indicators (e.g., speaker 40R), amicrophone 40P, and a display 40A or 40AA, At least one output from themicroprocessor 40G is supplied to the display 40A,40AA through aconventional LCD driver circuit that conventionally decodes andmultiplexes the data to be applied to the display 40A,40AA as well asknown parts of a computer arrangement, such as random access memory(RAM), read-only memory (ROM), and the like.

The bar code reader (BCR) apparatus 14 includes a decoding device 14B, acode reader device 14BB and an optical sensor 14BBB. The BCR apparatus14 preferably is used because of its low-cost and low-powerrequirements. It can include an LED bar code reader with low-lightlevels and preferably is implemented using a direct contact type of barcode reader. While it is understood that non-contact types of bar codereaders, such as laser-based ones, can be used with the invention, theytend to be more expensive and tend to consume more power. Virtually anybar code reading technology can be used with the present inventionincluding, but not limited to, imaging technology, CCDs, and the like.The system 1 also allows for direct wired and wireless communication andduple transmission with the central server 10 (or GPI). While the inputof product identification information preferably is accomplished usingthe bar code reader, manual entry using the keypad or RF wireless inputof product identification or any conventional wired or wireless input ofproduct identification also can be used. The IECLD 40 also hasconventional encoding and decoding programs which allow the IECLD 40user to read messages as well as to view multimedia files related toproducts used by the user 90, using the information transferred from thecentral server (or GPI).

In an exemplary embodiment, data such as drugs used by a patient isentered by scanning a newly created bar code element preferablyseparated from the conventional UPC code. The new product identifier ofthe present invention encodes information about the name andcharacteristics of the drug, date of manufacturing, plant location,serial number, and lot number, into what will be called hereinafterBarCodeData (BCD) or unique product identifier (UPI). Although UPI isused in the description, it is understood that the conventional NDC(National Drug Code) bar code can be used. The NDC has eleven digitscorresponding to the following: first five digits provide information onthe manufacturer, next four digits indicate the name and type of drug,and the last two digits provide packaging information. BCD or UPI is aunique identifier of the product and the characteristics of the product,such as concentration and strength, expiration date, serial number,plant number, date of manufacturing, and lot number. The UPI can beoptically encoded in a PDF417 format which, due to the high informationdensity and capacity, can include all of the information regarding theindividual product, including even test summaries, components,ingredients and parts used, personnel involved in the manufacturing ofthe product, manufacturing process, color additive(s) used when coatingpills, and so forth. Thus, the UPI when optically encoded gives all ofthe information necessary for the recall of any particular individualand single product or ingredient of that product such as color additivespresent in drugs and foods. It is important to note that theconventional UPC codes consist of a Universal Product Code which isuniversal and does not encode detailed characteristics of the product,as might be needed for certain recalls of individual and single productsor of a certain number of units of the product from a lot with the sameUPC code. Thus, the currently used UPC does not allow a single andindividual recalled product to be located. If a company, for example,has sold five million units of a certain over-the-counter drug, and5,000 units from three lots were contaminated, then a recall of only the5000 units is difficult to perform using the conventional UPC code.Instead, the recall probably would involve identifying and notifying allof the 5 million users. Using the UPI system according to a preferredembodiment of the present invention, it is possible to limit the recallto the 5,000 users who actually bought the product from the tamperedlots. Thus, while the system 1 is generally effective when implementedbased on the conventional UPC code, additional benefits can be realizedusing the UPI system of the present invention. Using the aforementionedUPI, only the 5,000 users at risk would be located and warned, thuscreating a significantly more cost-effective recall system for theusers, the companies, and the government.

The BCD or UPI may be used separately but also possibly in combinationwith the conventional UPC code. For instance the addition and/orsubstitution of a few encoded symbol or numbers to the UPC could providethe needed unique identifier data as described above, and thus could beeasily implemented to provide a modified UPC, which also would fallwithin the definition of UPI for the purposes of this disclosure. Thismodified UPC is easier to implement and thus represents the preferredembodiment. It should be emphasized that the “U” of UPI stands forUnique, which is completely contrary to “U” of UPC, which stands forUniversal. The UPI arrangement provided by the present inventiontherefore distinguishes from the UPC arrangement, at least because ituniquely identifies a product utilizing optically encoded symbology inan unique manner.

The UPI system allows a variety of potentially hazards elements to beencoded, including color additives. All drugs or/and food that containcertain potentially dangerous additives could be identified in thisfashion. For instance, color additive Red FD&C No. 2 was shown tosignificantly cause tumors in female rats and has been banned as unsafe.Color additive Red FD&C No. 3 has been found to cause thyroid tumors inmale rats but has not yet been considered unsafe and removed from themarket. As soon as the information is available, the user at risk isinformed, before the product is removed from the market by authorities.For instance, if the user has a family history of thyroid cancer, theuser would have the opportunity to make an educated choice and avoidfood and drugs that contain Red FD&C No. 3 based on the alert withrespect to foods and drugs that can be provided by the central server 10(or GPI) according to the principles of the invention. The informationpreferably is sent only to users with a personal or family history ofthyroid cancer according to information stored in the users' personalinformation database 700 (as will be described hereinafter), and notrandomly, thus optimizing the use of electronic data transfer. It isvery difficult for the average individual to be aware of harmfulproducts including harmful color additives. Although the additives areprinted in the label, the information is often meaningless for theaverage user. Furthermore, even when the user has knowledge ofadditives, the user most likely would still not know the latestinformation in regards to harm caused by such additives. Since thesystem 1 is continuously updated with respect to this type ofinformation about harmful products, the user has the advantage ofpassively receiving this updated information without being required toread the label and/or be knowledgeable about the barely publicizedeffects of chemicals that are present in products being used.

For the purposes of this description, the UPI can be a modified UPC, aseparate bar code from the UPC, a two-dimensional bar code with orwithout the UPC, or any other machine readable format that uniquelyidentifies a product according to the principles of the invention. Thereare some situations in which the conventional UPC could be used. Forexample, if the total number of units sold is similar to the number ofunits tampered with, for instance according to the above example, if5,000 units are recalled, but the total number of units sold is lessthan 6,000, or if the recalled units pose an immediate and 100% fatalthreat, then a comprehensive recall using the UPC code could be used.The UPC can also be used in association with the date of purchase tominimize or eliminate the return of any good products. In thisembodiment, the date of purchase is used and, based on the standard“first in first out” approach used by business concerns, the GPI system1 can identify the harmful products in a more precise manner. Forexample, a non-perishable product (UPC 12345) with defective unitsarrived at the point-of-sale on January 2. A second lot withnon-defective products but with the same UPC 12345 arrived on April1^(st). Only on April 30^(th) was it noted that the lot delivered inJanuary contained defective harmful product. Good products could havebeen sold with defective products in the month of April. Thus tominimize return of good products, the GPI system 1 sends two different“Alert” messages according to the date of purchase. Purchase dates up toApril 1^(st) identify the consumer as acquiring a defective product.Purchase dates between April 1^(st) and 30^(th) identify the consumer aslikely acquiring a defective harmful product and state “Please check lotnumber; if 11A, please stop using it and return it to vendor”. It ismost likely that, due to “first in first out”, purchases around April30^(th) do not include defective harmful products and in 60 days mostproducts are out of the inventory. The above method and system alsoapplies to perishable items but since those items have expiration dates,there is less risk of harm arising from long term storage or use of theproduct. As can be seen, although UPC can be used to practice theinvention, the preferred way is to use the UPI (Unique ProductIdentifier).

The bar code element UPI is a unique identifier of, for example, drug“X”. The UPI is then converted to binary data and is transmitted using acommunication interface to the central server 10 and stored as a binarynumber (e.g., 0100 . . . 0110 for drug “X”). The information on drug “X”is stored in the memory of the portable unit 40 with the data regardingdrug “X” being automatically electronically transmitted over theInternet to the central server 10 (or GPI). If, for instance, the userMr. Gerald M. Jones starts using a drug “X” that came from a differentlot, for example, one that included a new coating with a new coloradditive, then a new unique bar code element for that product is used,and the new data is stored as for instance “X1” with a binary-convertedUPI No. of 0100 . . . 0111. If Mr. Gerald M. M. Jones starts using adrug “X” which comes with a tablet of larger size, then a new unique barcode element is used to identify the product and is stored, forinstance, as “X2” (e.g., using a binary UPI number of 0100 . . . 0112),and then “X3” (UPI 0100 . . . 0113) for a formula manufactured abroad,and so on. Data entry using optically encoded symbology provides avirtually error-free entry system and a time-efficient andcost-efficient mode contrary to written and/or manually entered or typeddata. The large amount of data on the characteristics of medication “X”is conveniently and automatically acquired as a bar code number, andthen processed, and transmitted over a public network such as theInternet to the central server 10 (or GPI). The computer system 30 orportable unit 40 of the user and/or the GPI central server 10 cancontain the name equivalent data that can be used to generate the nameof the products scanned according to their UPI.

The bar code reader 14 acquires the information on the characteristicsof the product which are necessary for precise identification in case ofa recall, with the data preferably being transferred directly from theportable unit IECLD 40 to the GPI central server 10. Alternatively, theidentification data on the products can be transmitted later to theuser's computer system 30 via IR means 40E, RF means 40L and/or 40D, orvia conventional physically-wired downloading means with the processorexecuting the programs in the memory 40M necessary to carry out thefunction. The IECLD 40 includes a memory that stores the data about theproduct, and communications port(s) 40I, for downloading the data to theuser's computer system 30, with the user's computer system 30 havingcapabilities to connect with the GPI central server 10 via the Internet.Preferably, the portable unit 40 or IECLD 40 includes computer terminalcomponents having capabilities to directly connect with the Internet,thus bypassing the user's computer system 30 (e.g., a personal computeror desktop computer). The IECLD 40 also provides for duplexcommunication to and from the GPI central server 10 using conventionaldirect communication via telephone lines or wireless communication viathe RF transceiver 40L. The bar code data related to the preciseidentification of the product and biological variables acquired by theportable hand-held device 40 is uploaded to the central server 10 (orGPI) for storage via conventional or electronic communication devices.The processing and transmission of data can be performed by themicroprocessor 40G, using conventional applications. The data generatedby the microprocessor 40G also, or alternatively, can be supplied to theuser's computer system 30 using a typical wireless transmission.

The portable IECLD 40 provides means for entry, storage, processing andtransmission of the unique characteristics of a product and biologicalvariables to or into the central server 10 (or GPI). The central server10 then checks its database in order to update and/or generateinformation according to the data transmitted by the portable IECLD 40.According to the principles of the invention, if there is anyinformation stored that corresponds to a recalled product or the productidentifiers transferred are indicative of a product that can cause aharmful or life-threatening event, the information is retrieved and issent immediately as an “Alert” message which is then transferred back tothe individual user of the product, as previously described. Since theIECLD 40 is portable, hand-held and compact, the IECLD 40 can be easilycarried to different places and during trips and thus can haveapplications in virtually any environment including, but not limited to,doctor's offices, hospitals, pharmacies, grocery-stores, departmentstores, hotels, and the like, allowing easy acquisition of informationon products being used as well as easy retrieval of information bydirectly connecting the IECLD 40 with the Internet and directlyaccessing the central server 10 (or GPI) for the information aboutrecall in regards to the products being utilized by the user. The IECLD40 can also include GPS (global positioning system). This can be used tolocate the user in case said user is exposed to fatal injury/illness byusing a harmful product and does not respond (there is no read receipt).

FIG. 3C shows a frontal view of the housing 40C with a modified keypad40BB, for selection of product groups before product information isentered. FIG. 4 shows the IECLD 40 coupled to home-measuring devices 50,such as a self-tonometer 52 to measure eye pressure at home, aspreviously described by Abreu, a non-invasive self-measurement systemfor blood glucose 53, as described by Abreu; a continuous temperaturemeasuring device 54 (shown in FIG. 1) as described by Abreu; a heartrate and rhythm monitor 59; as well as a conventional electronic bloodpressure measuring device 55, electronic scale 57, and amicrofluidics-based intelligent contact lens 57. It is understood,however, that any other device capable of measuring any physical orchemical biological variable can be used in the present invention. Anoptical transceiver 40E mounted in the housing 40C of the IECLD 40establishes communication with the various home-monitoring devices andreceives and stores the information on the values of the many biologicalvariables, such as eye pressure, blood glucose, temperature, bloodpressure, weight, and the like. Data is transmitted and received by themicroprocessor 40G through the optical transceiver 40E by conventionalmeans of transmitting light signals. It is understood that the values ofthe biological variables can be entered manually into the IECLD 40 or byRF transmission (e.g. using RF transceiver 40L) as described by Abreu,but a more cost-efficient system involves the optically automatedtransmission of the biological variable values. The optical transceiver40E establishes data communication in bit serial format between theIECLD 40 and the user's computer system 30. The user's computer system30 is connected to the central server 10 (or GPI). It is understood thatthe IECLD 40 preferably acts as the user computer system 30 with adirect connection between the IECLD 40 and the central server 10 (orGPI), without the need for the user's computer system 30. In thisregard, the IECLD 40 can acquire and transmit to the central server 10both biological variables and product identification information. Theacquisition, storage and transmission of data preferably are performedvia programming within the IECLD 40, for example, using standardtechniques. It also is understood that any means for transferringbiological variables via a network such as the Internet 100 can beemployed by the present invention. The biological variables can beanalyzed against the product identification information stored in thedatabase of the central server 10 (or GPI) for the evaluation ofpotential interaction of the products with the biological variables orpotential harm caused by abnormal values of biological variables.

Although the IECLD 40 is preferably designed to be used by one person,more than one user can have his/her individual data in themicroprocessor-based portable IECLD 40. Naturally the user can selectwhat products or type of products the user is interested in receivingrecall or warning information concerning, and thus if the user does notpurchase or use baby products, the user has the option of not acquiringthe information or/and not transmitting the information and/or selectingnot to receive recall/warnings on the particular product. The user canat its sole discretion cancel or add any products or group of productsand/or biological variables to the main GPI database at any time.Besides the user actively deleting items, the principle of the inventionalso includes an expiration date for some of the products entered suchas perishables and ready-to-consume items as certain foods, drugs,cosmetics, and so on, so that the stored database for the user does notgrow too large and products are not kept in the database for anexcessive period of time.

Furthermore if a user brings his/her IECLD 40 to the doctor's office, adrug being prescribed may be entered and if there is a medical reasonfor the drug not to be prescribed or a drug interaction, then an alertwill be displayed in the display before the patient buys or starts usingthe drug, and subsequent to that the GPI gives alternative drugs for thecondition. For example, a general practitioner may prescribe a drug tocontrol heart rhythm, such as amiodarone, to a patient. This patient hasstored in his IECLD 40 medical information which includes measurement ofhis biological variables with a record of elevated eye pressure whichput that patient at risk for optic nerve injury. Now considering thatamiodarone was found to cause optic neuropathy as an adverse reaction,then the system identifies the potential harmful interaction between thedrug being prescribed (amiodarone) and the biological variable measured(elevated eye pressure) and alerts the user and the doctors. The GPIsystem 1 then sends alternative drugs that treat arrhythmia but withoutany adverse effect considering the user health status according to thebiological variables transferred. Naturally the patient also could bemade aware of the harmful interaction drug-biological variable at thepoint-of-sale or in the pharmacy by sending the information to the GPIserver 10, or at home by uploading the information to the GPI server 10and thus receiving the warning.

The apparatus and methods of the present invention allow acquisition,storage, transmission, and processing of objective biological functionand variables, as well as objective factors that can alter thebiological variables, such as the use of a variety of products. Thesystem of the invention provides a display of the alert informationneeded by the previously located user, as well as information on how tomanage the hazardous situation. Also provided are automatic updates ofinformation and guidance according to chronological changes of thebiological variables that would be otherwise undetected, therebypermitting the user to take timely appropriate action and establishcontrol over the hazardous situation.

The system 1 of the invention provides not only display andguidance/instructions on currently known hazardous situations, but alsomay predict and warn the user of the potential for a hazardous situationto occur before it takes place by continuously analyzing the data thatis transmitted for the purpose of intermittently providing informationand alerting the user about potential imminent hazardous situations. Thesystem 1 sets the criteria according to the data received from the userand the criteria is continuously adjusted in a graded manner, inaccordance with the updated data that is transmitted by the user and RIS60. If the criteria are met, the user automatically receives awarning/information about the potentially hazardous situation and/orguidance/instruction without interference from subjectiveconsiderations, nor the need for a human observer to select theinformation. The system 1 of the invention also provides and displaysinformation to the user about transmitted biological variables, orfactors that alter such biological variables, with the purpose ofimproving understanding and comprehension regarding the biologicalvariables, disease states or factors that may alter biologicalvariables, such as interactions with drugs and other products.

Referring now to FIG. 5A, there is depicted a simplified version of thesystem 1. The simplified version includes, for the user 90, an inputdevice for manual entry such as the keyboard 15 of a computer system 30,a communications interface 25, a central server 10 (or GPI), and the RIS60 and/or PHC 70. The computer system 30 can be implemented using atypical personal computer having input means such as a keyboard 15, amicrophone, a mouse, and/or the like, a processor, a display element,and a network interface. The computer system 30 likewise can include aCPU, ROM, RAM, input device, memory device, video driver, video monitor,clock and modem. While FIG. 5A shows a desk-top computer system 30, itis understood that a hand-held computer 30, as shown in FIG. 5B, can beused instead of a traditional desk-top computer. The personal digitalassistant 30 can have an electronic architecture similar to that of thedesk-top computer system depicted in FIG. 5A and can work in a similarmanner. The computer system 30 in FIG. 5B, however, preferably includesa touch-screen display 30B that facilitates manual entry of productinformation or other information. Also shown in FIG. 5B are thecommunications interface 25, a central server 10, and the RIS 60.

With reference to FIGS. 5C-5F, transaction terminal equipment, generallydesignated by the reference numeral 39, can be used at apoint-of-transaction (e.g., a point-of-sale) to connect thepoint-of-transaction to the central server 10. Using this equipment 39,it is possible to transfer unique product identifiers to the centralserver 10, without the need for duplicating the entry of productinformation or double-scanning of the product, i.e., once at thepoint-of-transaction to consummate the transaction and then again athome or elsewhere when data is to be entered into the system 1. Thus, asingle scan at the point-of-transaction will suffice for both purposes.While the user can provide a user identification number or otheridentifier that is manually keyed into the equipment 39, it is moredesirable to provide the user with a card 39A, that is swiped orotherwise read electronically at the point-of-transaction to provide theequipment 39 with a user identification. The unique product identifiers39B scanned at the point-of-transaction then can be associated with theuser identification as read from the card 39A, and the resultingcombination of data can be transferred to the central server 10. Thedata from the product identifiers 39B being scanned in this manner, canbe automatically transferred to the GPI server 10 according to criteriaset forth for each individual user.

The exemplary point-of-transaction equipment 39 in FIG. 5E includes atransaction terminal 39C, a display 68, a card swipe device 39D such asa credit card reader through which a magnetically encoded GPI card thatcarries a user name can be read, a flat card reader or smart card slot39E equipped to read at least the user name from the smart card 39A, akeyboard 58, and a bar code reader 14 adapted to read bar-coded productinformation in the product identifiers 39B. As shown in FIG. 5E, theequipment 39 at the point-of-transaction can further include datacommunications means 49, and a printer 39F that prints the bar codes 39Gconveniently on a single piece of paper 39H, e.g., if the connection tothe GPI central server 10 is not available, so that these can be scannedlater at home.

FIG. 5C is an enlarged view of the card swipe device 39D. FIG. 5D is anenlarged view of the exemplary bar code reader 14. The credit cardreader 39D reads binary coded data recorded magnetically along a lengthof a credit card. The bar code reader 14 reads optically encodedsymbols. The credit card reader 39D preferably includes a slot 51. Theconsumer or salesperson inputs the data by swiping the credit cardthrough the slot 51.

In the alternative embodiment of FIG. 5F, a smartcard 39A is shown at amore portable version of the point-of-transaction equipment 39. With thearrangements shown in FIGS. 5C-5F, the user can acquire a variety ofUPIs 39B and then swipe the card 39A through the appropriate one of thereaders 39D or 39E. The card 39A, preferably, has a memory medium 39Ithat stores the user identification, along with encoded data capable ofopening a connection with the central server 10 (or GPI). Thepoint-of-transaction thus has a card reader 39D, 39E communicating withthe central server 10 (or GPI). When the UPI codes are scanned using aconventional bar code reader at the point-of transaction, the UPI datais automatically transferred to the GPI server 10 and stored under theusername.

Referring to FIGS. 5C to 5J, the embodiment related to the use ofpoint-of-sale for acquisition of consumer identification and productidentifier for recall and warning includes point-of-transaction terminalequipment 39 and preferably remotely located Card Central Computers 80(CCC). Data on products associated with a credit card sale or the likeis collected and transmitted to said CCC 80 for storage of said productinformation and card holder identification, with said productinformation including the elements necessary for identification of arecalled product and the consumer using such product(s) according to theprinciples of the invention. The smart card 39A or other card such as acredit card which is used for payment, can also be used to identify theconsumer as “registered” and as being qualified to use the GPI system.

The CCC 80 can include central credit card computers, computerizedcredit card authorization or validation centers, computerized insurancecompany centers, the GPI server 10, or any central computer capable ofreceiving and storing product identifiers and consumer identificationaccording to the principles of the invention. The card 39A, for thepurposes of this description, can include conventional credit cards, theGPI SafetyCard, smart cards, debit cards, store payment card, gaspayment cards, telephone cards, insurance cards, courtesy cards, othermagnetically or optically encoded cards, programming cards, CD cards,and the like. Point of sale for the purpose of the description includesany place in which a consumer can acquire a product which can cause harmto the user or be recalled. For example, but not by way of limitation,point-of-sale can include stores, malls, supermarket, pharmacies,dealerships, retailers, any business concern, and the like. Althoughpoint-of-sale is described, any point at which goods are acquired,regardless of payment for such goods, can be used and such goods coveredby the GPI system, which is also referred to herein at the GPI SafetyProgram.

The GPI Safety Program is a free-of-charge recall and warningnotification system to users of products as disclosed in the presentinvention. The user receives a GPI SafetyCard such as card 39A whenregistering with the GPI system 1 and the GPI Safety Program. Oneexemplary means of registering occurs when the consumer fills out aconventional credit card form. The consumer checks the GPI SafetyCardbox on the form, reads the respective information on the GPI SafetyProgram for Recall and Warning, and signs the form authorizingcollection of product identifiers. Blank credit card forms may be foundin stores or such forms may be received through the mail orelectronically. Similarly, the consumer may receive GPI Safety Programforms and apply for a GPI SafetyCard in the same fashion as applying fora conventional credit card. However, contrary to credit card companiesthat can deny issuance of a card due to poor credit history, in the caseof the GPI Safety Program everybody can be accepted and each eligibleconsumer that enrolls free-of-charge in the Safety Program for Recalland Warning will receive a GPI SafetyCard.

The GPI SafetyCard 39A is a unique customer card issued to the customerafter appropriate registration with the GPI Safety Program for Recalland Warning Notification. The GPI SafetyCard 39A has magneticallyencoded data similar to a credit card, but said SafetyCard has nopurchasing function. The GPI SafetyCard 39A has preferably a thinmagnetic strip 41 with an identification number stored thereon. The GPISafetyCard 39A is used to identify the consumer as registered with theGPI system 1 and GPI Safety Program. The GPI SafetyCard 39A can haveidentification and information data encoded in a dual face format, thefront having magnetically encoded data in a strip 41 similar to creditcards, and the back having optically encoded data such as a bar-code 43.The GPI SafetyCard 39A can also be used as a key ring card, CD card, orby any other suitable means to store the registration code with the GPISafety Program. The encoded information in the GPI SafetyCard 39A caninclude customer identification number (GPI Safety Program number),username, name, address, and the like. An authorized GPI credit card 39Ameans a credit card which the card holder is registered with the GPISafety Program as described above. The authorized GPI credit card 39Acontains in one of its tracks a few extra bits of information such asthe GPI identification number or any other means to identify theconsumer as “registered with GPI”. At least one of the tracks of card39A includes information on registration with GPI Safety Program andpreferably the arrangement conforms to the specifications found in theAmerican National Standard for magnetic stripe encoding and interchangemessage, and in accordance with standards by the American NationalStandards Institute. Each authorized GPI credit card 39A or the GPISafetyCard 39A is unique in that it contains a code unique to the GPISafety Program in its track. The GPI SafetyCard 39A can also have otherinformation embossed on the card for further identification.

Besides using a conventional stripe credit card, the system can includea GPI SafetyCard 39A which uses only a bar code 43 or other opticalsymbols as means for identification of the consumer. If the consumeruses a bar coded GPI SafetyCard 39A, then the consumer presents saidSafetyCard at the point-of-transaction terminal 39C which is thenscanned by conventional means for bar code reading. Subsequently,products purchased with their respective product identifiers arescanned. If the consumer is registered with the GPI Safety Program andhas the encoded authorization code to store product identifiers, thensaid product identifiers are stored in the point-of-transaction terminal39C under said consumer identification which can include a username orInternet address. The information stored is then transmitted to the CCC80 when connection with said central credit card computer isestablished, or may be stored for later transmission in accordance withthe principles of the invention. It is understood that the bar coded GPISafetyCard 39A can be scanned at the end of the transaction by thepoint-of-transaction terminal equipment 39. In this instance after theproducts purchased are scanned, then the said bar coded GPI SafetyCard39A is scanned and the operation proceeds as described above.

The point-of-transaction terminal equipment 39 includes credit card datainput devices which in the preferred embodiment include a credit cardreader 39D. For the purpose of the description, the credit card readercan be considered to be a device capable of identifying the consumer asregistered with the GPI Safety Program which then allows acquisition andtransmission to the CCC 80 of product identifiers related to thatconsumer. The credit card readers 39D generate digital output signalsindicative of the magnetically encoded GPI Safety Program registrationinformation.

The point-of-transaction terminals can function as the entry point forthe product identifiers and consumer identification. Thepoint-of-transaction terminal equipment 39 can include wired or wirelesscash registers, check out stations, and the like. In the case ofwireless transmission, the point-of-transaction terminal 39C transmitsto the CCC 80 data packets over a radio frequency communication network.When a registered consumer purchases products using an authorized GPIcredit card 39A, then the product information and user identification istransmitted by conventional means to the CCC 80. Once thepoint-of-transaction terminal 39C actuates, automatically or manually,the transmitting means, the product identifiers scanned are thentransmitted to the CCC 80, either concurrently with the transaction orlater on in a batch form. Preferably, the product identifierstransmitted and stored identify products that could be recalled and thatare most likely to cause harm to the consumer. This approach avoidstransmission and storage of information on products that are less likelyto cause harm to the consumer. In one preferred embodiment the productidentifiers collected and transmitted concern drugs or medical productspurchased at a pharmacy. However, any consumer acquiring any product canbe protected against harm or death in accordance with the principles ofthe invention.

As shown in FIG. 5K, the point-of-transaction terminal equipment 39includes within the terminal 39C processing means 110 and memory 61 (RAMand ROM) for controlling operations of said terminal 39C with saidprocessing means 110 interconnected to the other parts of thepoint-of-transaction terminal equipment 39 and being programmed so as toprovide suitable control over the individual operational elementsdescribed herein. The point-of-transaction terminal equipment 39 willpreferably have communication means and data communication means 49providing for a suitable telephone line connection, cable, wireless, andthe like, so as to enable communication with the CCC 80 overconventional telephone lines, the Internet, wireless, and the like. Datacommunication means 49 is operatively interconnected with the centralprocessor 110 for communicating data between the central processor 110of the point-of-transaction terminal 39C and the CCC 80. The memory 61at the point-of-transaction terminal 39C can be used for storing productidentifiers concerning products which were scanned or entered by thepoint-of-transaction terminal equipment 39, and includes sufficient datastorage so as to enable storage of product identifiers and consumeridentification. The processing means 110 at the point-of-transactionterminal 39C can be programmed to permit storage and transmission ofproduct identifiers and consumer identification to the CCC 80, either bydownloading at a later time or by transmission at the time of purchase.Various storage compartments (not shown) might be included with thepoint-of-transaction terminal equipment 39 to provide for storage ofdata (product identifiers, consumer identification, transactiondocuments, and the like). The data storage can be located at thepoint-of-transaction terminal 39C or other suitable electronic datastorage at the point-of-sale.

For example, but not byway of limitation, the product identifiers arepreferably encoded as optical symbols suitable for reading by a bar codereader 39D at the point-of-transaction terminal 39C. It is understoodthat other means to identify products being purchased or to readmerchandise identification tags, whether currently available ordeveloped in the future, can be used according to the principles of theinvention. Exemplary other means to identify products at a checkoutcounter can include radio frequency tags, magnetic tags, other opticalsymbols, transponder means, and the like. It is understood that theprinciples of the invention apply to an environment where there is nocheck-out station as well as where products are not entered by a clerknor have a bar code for merchandise identification. For instance thereis no need for check-out stations when using certain radio frequencytags for merchandise identification. The radio frequency contains theinformation related to merchandise identification and productidentifiers, with said information being linked to local store computers39N which can further transmit the product identifiers to the CCC 80either real time or in batch format at a later time. The method and typeof payment identifies the user and links the user with the productidentifiers being wirelessly transmitted to the CCC 80. When a producthas various parts, such as in a machine or vehicle, which canindividually pose danger to the user, said individual parts can beidentified in the same fashion as has been described, or collectivelyidentified with a unique product identifier that includes identifiersfor each part of the product.

When the point-of-transaction terminal equipment 39 is connected to aCCC 80 and product purchases occur, the point-of-transaction terminalequipment 39 is used to read the identification on the card 39A andestablish communications with the CCC 80. The consumer or salespersoninputs the data by swiping the credit card or GPI SafetyCard 39A throughthe slot 51 in the credit card reader 39D. The information provided bythe credit card reader 39D to the central processor 110 about the cardholder identification is transmitted to the CCC 80. Upon receipt of theinformation, the CCC 80 checks the identification of the card holder andadvises the central processor 110 at the point-of-transaction terminal39C as to whether this card holder is registered with the GPI system 1and if there is proper consumer authorization to use the credit card forcollection of product identifiers in accordance to the GPI SafetyProgram for Recall and Warning Notification. If the card holder is aregistered GPI user, then the CCC 80 transmits electronically anappropriate response to the central processor 110 at thepoint-of-transaction terminal 39C which permits transmission of productidentifiers stored at said point-of-transaction terminal 39C to said CCC80. The product information transmitted can include product identifier,date of purchase, lot number, and other related information according tothe principles herein described. If any product identifier is recognizedas recalled, then the CCC 80 automatically sends the “Alert” messagewhich may actuate the printing device 39F at the point-of-transactioncausing it to print said “Alert” message. The transmission of productidentifiers can occur during the transaction or, if the transactionoccurs during peak or high traffic hours, the point-of-transactionterminal 39C can retain and store product identifiers in thepoint-of-sale memory medium such as local store computers 39N which alsoincludes memory area 39M in the point-of-transaction terminal 39C. Thepoint-of-transaction terminal 39C or other suitable computer system atthe point-of-sale then transmits to the CCC 80 product identifiers forthe various registered users collected over time. These transmissionscan be scheduled to occur during off-peak access times and using a batchformat. Besides linking with CCC 80, those point-of-transactionterminals 39C can be linked to other computers (not shown) throughconventional telephone lines, the Internet, wireless means, or the like.

The merchant, point of sale, or any point of transaction for purchasingany product verifies with the CCC 80 whether the card holder isregistered with GPI and thus whether the card holder has authorized thecollection of information on products purchased. In the credit cardtransaction industry, there are completely computerized credit cardverification services that verify credit cards in real time. Thepoint-of-transaction terminal equipment 39 disclosed herein canelectronically connect with one of these credit card verificationservices or any computerized center referred to herein as CCC 80, andobtain verification of registration with the GPI Safety Program beforecompleting the second part of the transaction conventionally used in thecredit card industry. The point-of-transaction terminal equipment 39 canbe configured to interface with the CCC 80 to receive a code forcapturing and transmitting or storing product identifiers prior tocompleting the remainder of the credit card purchase transaction.Alternatively, the point-of-transaction terminal equipment can beconfigured to interface with the CCC 80 to receive a conventionalapproval code for credit card purchases prior to completing the captureand transmission or storage of product identifiers. In this embodiment,while the receipt is being printed and signed by the consumer, theproduct identifiers are transferred to the CCC 80.

As an illustration, the preferred embodiment described can beaccomplished by the point-of-transaction terminal equipment 39 callingthe CCC 80 so as to obtain information on consumer registration with theGPI Safety Program. In accordance, after selection of products by acustomer, the products are scanned using the point-of-transactionterminal equipment 39 and product identifiers obtained. Thepoint-of-transaction terminal 39C places this information into memory 61and holds this information until receiving a code from the CCC 80. Thecard 39A then is swiped and the point-of-transaction terminal equipment39 forwards a stream of information as a single data transmission to theCCC 80 which includes GPI Identification number, the credit card number,expiration date, and date of purchase. The date of purchase can, forexample, be used as means to identify a particular recalled product. TheCCC 80 reviews its database files to determine if the card holder isregistered with the GPI Safety Program. Thereafter, the CCC 80identifies the card as registered or non-registered. If registered, theCCC sends, via the data communications link, a capture code whichpermits product identifiers stored at the point-of-transaction terminal39C to be transmitted to the CCC or other data storage locally. Thepoint-of-transaction terminal 39C then accepts the code and transmitsthe product identifiers to the CCC 80 or stores said product identifierslocally for later transmission. The operation then proceeds in thecustomary fashion for a validation of a credit card, as is well known inthe credit card industry.

Alternatively, the point-of-transaction terminal equipment 39 may haveinterface means to locally identify whether the consumer is registeredwith the GPI Safety Program. Upon inputting the credit card data or theGPI SafetyCard data by swiping the card 39A, the interface electronicswithin the point-of-transaction terminal equipment 39 performs a localregistration check to identify whether the card holder is registeredwith the GPI Safety Program. This local verification at thepoint-of-transaction includes checking for the encoded data in thecredit card that identifies the consumer as registered. The GPISafetyCard format can be confirmed against a memory check at thepoint-of-transaction terminal 39C.

In a further alternative embodiment, the point-of-transaction terminalequipment 39 is not used as an entry point or for transmission ofproduct identifiers to the CCC 80, but is used as a collection site forthe consumer. In this embodiment, after the products are scanned at thepoint-of-transaction, the consumer uses the credit card reader 39D towrite information onto an information bearing stripe 41 such as the onepresent on the GPI SafetyCard 39A. Consumers can then download theproduct identifiers and transmit the data to the CCC 80 at theirconvenience.

A yet further alternative embodiment includes swiping the credit card39A in the card reader 39D in the usual fashion and then entering aspecial registration code or command into the card reader keypad (notshown) or other point-of-transaction terminal equipment 39. In thisembodiment any regular credit card, even one without a Safety Programregistration encoded thereon, can be used. This manually-entered specialcode or command identifies the consumer as registered. At least twomethods of operation may then be undergone. In a first method, data isnot sent to the CCC but instead the manually-entered approval codeexecutes the operation for storage of the product identifiers locally atthe point-of-transaction. In this case, the whole operation ofacquisition of product identifiers is done locally at thepoint-of-transaction. According to the second method, the registrationdata is transmitted to the CCC 80 and operations occur as previouslydescribed. The approval code serves as the consumer identification asregistered with the Safety Program, with said approval code beingtransmitted to the CCC 80. It is also understood that alternatively theuser can simply enter a code at the point-of-transaction terminal 39Cwithout using any card 39A. The code indicates to the clerk that theuser is registered with the GPI Safety Program. The clerk then can storethe product identifiers for that user locally or transfer thisinformation to the CCC 80. In this embodiment the whole operation can bedone without the credit card reader 39D.

According to an exemplary operation, the consumer purchases products ata point of sale. The products are then scanned and product informationis temporarily stored in the point-of-transaction terminal equipment 39.The consumer or store clerk swipes the credit card 39A in the usualfashion. After the credit card 39A is validated as registered with theGPI Safety Program locally (at the point-of-transaction terminal 39C),or preferably through a verification computer such as CCC 80, then ifthe consumer is registered with GPI the first message that appearsindicates that the consumer is registered and that the productidentifiers are captured and either transmitted to the CCC 80 or storedlocally. Subsequently, the point-of-transaction terminal display 68displays the approval code for the purchase in the usual fashion forcredit card approval well known in the credit card industry. If theconsumer has two cards, for instance, such as a conventional credit cardand the GPI SafetyCard, the consumer first swipes his GPI SafetyCard 39Aand receives the “registered” message, and then swipes his regularcredit card in the conventional fashion. If the user is not using acredit card or the like and decides to pay with cash or check, theprinciples of the invention still apply. In this situation, after theproducts have been scanned in the usual fashion, the consumer swipes theGPI SafetyCard 39A in the slot 51 of the regular credit card reader 39Dand waits for the response from the CCC 80 or terminal equipment 39. Thecard in this case is not used for purchase but only for verification ofregistration with GPI.

If the user is registered, the operation proceeds as previouslydescribed. The user then pays with cash in the usual fashion. As brieflymentioned, it is understood that the point-of-transaction terminalequipment 39 can identify if the user is registered and thus avoid extratransmission of data and response to/from the CCC 80. When thisembodiment is used, as soon as the user swipes his/her card 39A, thepoint-of-transaction terminal equipment 39 identifies the user asregistered and stores the product identifiers for the consumer accordingto the principles of the invention. In the event that the consumer hasforgotten the GPI SafetyCard 39A, the consumer can manually enter theGPI identification at the credit card reader keypad, and the operationwill proceed as previously described. Although it was disclosed that thecard 39A was swiped after the products were scanned, it is understoodthat the consumer can first swipe his/her card 39A which would identifythe consumer as registered. Then each product scanned is automaticallystored for either transmission to the CCC 80 or further storage locallyat the point of sale.

Cell phone, personal digital assistants, computers, and many otherdevices can have built-in credit card readers and said card readers canbe used to identify the consumer as registered with the GPI SafetyProgram and allow acquisition and transmission to the CCC of productidentifiers related to the consumer.

FIG. 5G shows schematically an exemplary bar code-based GPI SafetyCard39A using a key ring arrangement being scanned by a bar code reader 14.FIG. 5H shows a list of products 39L with the respective productidentifiers L₁-L_(n) which were scanned after the GPI SafetyCard 39A wasscanned. The product identifiers L₁-L_(n) can then be transmitted to atemporary storage area 39M at the point-of-transaction terminal 39C, orat the inventory storage area 39N of the point-of-sale, or directly tothe CCC 80. FIG. 51 shows the interconnections between the temporarystorage area 39M, inventory storage area 39N at the point of sale, suchas local store computers, and the CCC 80. Data can be sent from thetemporary storage area 39M to the inventory storage area 39N at thepoint-of-sale for subsequent transmission to the CCC 80 or may be sentdirectly to the CCC 80. Data from the inventory storage area 39N of thepoint-of-sale can be sent directly to the CCC 80. Thepoint-of-transaction terminal 39C can generate real-time data forre-stocking merchandise inventories as well as providing data to the CCC80 for tracking recalled products.

Now referring to FIG. 5J, the system can also include a centralprocessing station 42 connected to a plurality of point-of-transactionterminals 44 such as cash registers. All of the information on productidentifiers and user identification are transferred to the centralprocessing station 42 and said central station transmits the data to theCCC 80 real-time by modem or wirelessly, either real time or in batchformat at a later time. The communications between the point of sale andthe CCC 80 can include the use of secured XML tunnels. In addition,packetized or serial data can be communicated. The GPI SafetyCard 39Acan have in its tracks the code to call the GPI server 10 when said GPISafetyCard 39A is swiped through the credit card reader.

Another embodiment includes the use of a GPI SafetyCard 39A or a creditcard to transmit data directly to the GPI server 10. If the user isregistered, then the point-of-transaction terminal equipment 39 canassemble the data on product identifiers and username into packets andsend the data wirelessly or by modem directly to the GPI server 10. Inthis case the GPI server 10 acts as the CCC 80 and thepoint-of-transaction terminal verifies GPI registration locally withoutsending any stream of data via interface with the credit card reader.

FIG. 5K shows a block diagram of the basic features and interconnectionof the major components of exemplary point-of-transaction credit cardterminal equipment 39. The point-of-transaction terminal 39C is governedby the CPU or central processor 110. The CPU 110 can be programmed toperform the functions necessary to carry out the operations according tothe principles of the invention. The CPU 110 receives input from thecredit card reader 39D, credit card keypad 63, keyboard 58, scanner 72,and memory means 61. The data communication means 49 is bi-directional.CPU 110 receives data transmitted to the point-of-transaction terminal39C via communication means 49 such as a modem. CPU 110 generates anumber of outputs including printer control and data signals to printer39F, data signal to speakers 66, output data or information to thedisplay 68 including messages such as “registered” or “non-registered”,and data output for storage in memory 61. CPU 110 by its communicationmeans 49 transmits data to the CCC 80 over communication medium 74 suchas telephone lines, wireless means, Internet, or the like. Transmissionof data can be implemented using EDI (Electronic Data Interchange) suchas X12 or EDIFACT and communication means such as EDI VAN (value-addednetwork)

FIGS. 5L and 5M are a flow diagram of the basic operation of theexemplary point-of-transaction terminal equipment 39 according to thepresent invention and serve to illustrate an exemplary basic cycle ofoperation thereof. As indicated in FIG. 5L when a consumer purchasesgoods, step 120, product identifiers are scanned or manually entered andproduct identifiers are obtained. At step 122 product identifiers arestored in an electronic data storage 61 at the point-of-transactionterminal 39C and displayed on screen 68. The product identifier datastored in the point-of-transaction terminal 39C represents the dataobtained by entering or scanning information on the products purchasedby the consumer. Next the operation determines whether the user card 39Ais available, step 124. If no card is available, step 126, the operatorenters card information using keypad 63 and the information is stored inmemory 61, step 132. When the consumer uses a credit card 39A forpayment, step 128, the operator (sales clerk) or user swipes the creditcard 39A in a magnetic stripe credit card reader 39D. At step 130,credit card swiping results in the credit card reader 39D reading thecard information which includes user identification and code forregistration with the GPI Safety Program. At step 132, card informationis stored in memory at the point-of-transaction terminal 39C and, atstep 134, user identification is displayed. Step 136 then establishesconnection with CCC 80 and electronically transmits a stream of encodeddata to CCC 80 including GPI identification number, if present. Uponreceipt the encoded data, step 138, CCC 80 checks its database toidentify the consumer as registered or non-registered.

Referring to FIG. 5M, the method continues at step 140, with thepoint-of-transaction terminal 39 receiving code for “registered”or“non-registered”. A determination is then made whether the consumer isregistered or non-registered, step 142. If the user is using a GPISafetyCard or an authorized GPI credit card with a valid start of databit, then the user is identified as registered and the code authorizescapture and storage of product identifiers for that user. Accordingly,if the user is registered then operation executes step 144, to determinewhether the transaction is occurring during peak hours. If thetransaction is occurring during peak hours or high traffic, thepoint-of-transaction terminal 39C retains and stores product identifiersand consumer identification in the point-of-transaction data storagemedium, step 146 for later transmission of the data. This alternativemode can be automatically chosen during high traffic hours at thepoint-of-transaction terminals, allowing efficient transmission of dataduring such peak hours. At the end of the day, for example, thepoint-of-sale terminal computers batch the record data for all consumersand submit the data to the CCC 80 for storage. In accordance, at step148 the terminal transmits to the CCC product identifiers for thevarious registered users collected over time and using a batch format,and the operation ends.

If the transaction is not occurring during peak hours, step 150, theproduct identifiers are transmitted to and stored in the CCC 80 underthe user identification which can include the username or Internetaddress. At step 152, the product identifier(s) are then checked againstthe CCC 80 database to determine whether there are any productidentifiers transferred which were recalled. At step 154, thepoint-of-transaction terminal equipment 39 receives code “recalled” or“non-recalled”. Step 156 then determines whether the product has beenrecalled. If no, step 158, the terminal displays “non-recalled” and theoperation ends. If yes, step 160, the point-of-transaction terminalequipment 39 displays the product identifier for the recalled productand prints an “Alert” Message related to said product identifier, step162, and ends operation.

If, at step 142, it is determined that the user is not registered, thenno product identifiers are stored and the terminal displays“non-registered” at step 164, the operation ends, and the processingoccurs as with conventional credit card validation for payment of goodsand approval for sales. After any step in which the operation ends, thenconventional processing for credit card automatically occurs andauthorization for payment is conducted in the conventional fashion forcredit card use for purchasing goods and obtaining approval for saleswhich is well known in the credit card industry. When the system forrecall and notification is implemented using multiplepoint-of-transaction terminals 44, then a plurality of terminals with acentral processor are in communication with the CCC 80. In this instanceCCC 80 can be linked to all point-of-transactions terminals 44. Afurther alternative embodiment includes reprogramming credit cardterminal equipment 39 to tag each transaction with the username prior totransmission to the CCC 80.

If a product is purchased over the Internet 100, then the productidentifier can be automatically transferred to the GPI server 10 duringthe transaction. Purchases can include e-commerce, m-commerce, or anyelectronic acquisition of products over the Internet includinge-business with acquisition of products by a business concern fromanother business concern. For example, a GPI agent can be downloaded toan authorized user's computer and used to capture the purchase data fromthe user's computer 30 and transmit to the GPI server 10 using a securedXML tunnel. A special web browser can be used to capture data related toacquisition of a product. FIG. 5N shows exemplary steps for acquisitionof product identifiers over the Internet. At step 121 products (items)are selected and product identifiers appear on the screen of a computer.At step 123 the user accepts, purchasing items displayed in the line ofitems. Step 125 shows a bill of materials invoice or line of itemsinvoice on the screen of a computer related to items purchased. Step 127captures data displayed. Step 129 transmits data to GPI server 10, andthe operation ends.

Besides using a conventional computer device for receiving anddisplaying alert information, the display of a cellular enabled devicecan be used. FIG. 5P shows an exemplary block diagram of the connectionbetween the GPI server 10 and a communications company 300 and user 90.The GPI server 10 can be connected to communications company 300 byphysical or wireless means. Likewise, communications company 300 can beconnected to the user 90 by physical or wireless means. The GPI server10 transmits the alert information to a communications company 300 whichsubsequently transmits the alert information to the user, for example tothe screen of a cellular telephone. As shown in FIG. 5Q, user 90 maytransfer over the Internet the line of items purchased to supplier'sserver 350. Supplier's server 350 may then transmit the line of items tothe GPI server 10 over a secured XML (extensible markup language) tunnelor virtual private network. User 90 can also transfer the line of itemsdirectly to GPI server 10.

Although the point-of-transaction terminal equipment 39 can have meansto select what products to choose and transfer data for, in some cases,it is more cost-effective to have information for all products or atleast all products of a certain group (which were identified by propercode) sent to the GPI server 10. If all products purchased by every user90 are scanned and the data transferred to the GPI server 10, it maycreate a potential data overload. It is therefore preferred that theuser has the option to select the products for which information will betransferred and stored in the GPI database e.g., typically thoseproducts that are most likely to cause significant harm and increasedhealth care costs. Although technically possible, it would be difficultif, for example, at the point-of-transaction a first user only wants oneitem transferred, then a second user wants one item from the D2(over-the-counter drugs) group and four items from the C (cosmetics)group, and none from the F (food) group, and then a third user purchasesitems in all of the groups but wants two individual products of the Mi(Miscellaneous) group, one out of ten in the F group, two out of eightin the C group, and so forth. Under these circumstances, it would bepossible but cumbersome to implement the invention in that fashion. Itis therefore preferable for the user to transfer all of the identifiersor select only the products he/she is interested in receivinginformation about, by acquiring the UPI using the aforementioned IECLD40 or GPI SafetyCard 39A only for the selected items.

Alternatively the user can acquire data on all the products purchased atthe point-of-transaction, and store the data in the smartcard 39A. Thesmartcard 39A then is read in a suitable reader and information on theitems selected by the user 90 is transferred to the GPI central server10 for storage. Naturally, the user 90 during registration or at anytime thereafter has the option to select and/or block the information tobe sent about harmful, beneficial, or recalled products at the user'sdiscretion. For example, the user 90 may only want to know aboutrecalled products, or only recalled drugs and harmful effects of drugs,or recalls and beneficial information on cosmetics, or recalled baby/toyproducts and recalled drugs and cosmetics, and so on. Thus, even if allUPIs are transferred, the system 1 can be tailored to the individualneed of each user so that only the data that is meaningful to that useris transferred.

Although the preferred embodiment concerns the electronic transfer ofinformation, the invention can be carried out using conventionalcommunication means as previously mentioned. In those alternativeillustrative embodiments, the user 90 can utilize a conventionaltelephone line to communicate with the central server 10 (or GPI) whichcan direct the user to a human attendant who then registers the user 90and collects the personal information, the UPI data, and any biologicalvariables data if applicable. The attendant then converts the data intobinary elements and transmits and stores the data in the GPI centralserver 10 in the manner previously described, or alternatively,digitized and faxed information could be acquired and processed in asimilar manner. Once the user 90 is registered, the whole entering ofdata can be done automatically without human interference since the dataconsists of numbers for either the UPIs or the biological variables.This consequently can be performed using a telephone keypad andconventional Interactive Voice Response (IVR) Unit. The user 90 then cancontact the GPI central server 10 to receive feedback information on theproducts being used. The GPI central server 10 can convert text intoaudio with standard electronic voice synthesizers.

Although less preferable, it is intended that the current invention alsocan be carried out using printed medium which is converted into binaryelements and used in accordance with the principles of the inventionpreviously described. Although the preferred way to carry out theinvention involves data transfer in electronic mail format, it isunderstood that other electronic data transfers including automatictransfer to a computer, without the user necessarily having to open andread an e-mail, can be used. For instance, if a company is registeredwith the GPI system 1, the information can be transmitted usingelectronic data transfer and interface with the alert informationappearing directly on the computer screen of a designated humanattendant. For users who cannot receive electronic transmissions or haveno connection with the Internet, an automated print out sheet with theinformation can be made and mailed to the user by conventional means tothe user's regular mailing address, thereby allowing potentiallylife-saving information about recalled products to reach any user. Inaddition, a recall message and information can be sent to a telephonedevice and displayed on the screen of said telephone device. Althoughprinted means and conventional telephone means are not the preferredway, the critical information about recalled products can be madeavailable to anyone regardless of their electronic capabilities. Asmentioned above, any user 90 of a product can register freely using thePCT stations 156 and transfer product identifiers. Such users 90 aresubsequently informed by mail or phone messaging when they do not haveInternet capabilities. When using electronic means, the preferred outputmeans includes a computer screen, whether portable, conventional, orother as previously described, but for elderly patients a more friendlyinterface such as a television screen is a desirable alternative waycarrying out the invention. In this regard, the IECLD 40, besides itsregular functions described, can work as the remote control for thetelevision and/or VCR.

With reference to FIG. 6, a preferred embodiment of the central server10 will now be described. The exemplary central server 10 includes a CPU500 and an exemplary memory medium 502 with an exemplary memoryarrangement 504. The exemplary memory arrangement 504 includes databasessuch as a product database 506, a biological variables database 508, aninteraction database 510, an alert database 512, a personal informationdatabase 514, and the user's product usage database 516, as well asconventional modules 518. The modules 518 may include databasemanagement modules 520, search modules 522, encryption/decryptionmodules 524, time/date modules 526, transmission modules 528, and e-mailmodules 530 along with secure server-based electronic mail application.The exemplary central server 10 also includes a clock 532, operatingsystems 536, RAM, ROM and other typical server 10 applications andhardware well known in the art. Although the GPI central server 10preferably searches using ASCII character and numerical matching andcomparison, it is understood that graphics, multimedia, sound, and thelike can be used according to the style of database and computerapplications utilized.

Still in reference to FIG. 6, the CPU 500 interfaces with the operatingsystem 536 which may include single or multiple high-speed processorsoperating in parallel or otherwise executing applications stored in thememory devices, RAM and ROM, to carry out the necessary functionsillustrated below according to the principles of the invention. The CPU500 receives UPIs and biological variables from the user 90 andinformation on UPIs from the RIS 60, preferably via the Internet 100through a communications interface 540, and stores the data from theuser 90 in the product database 506, user's product usage database 516,biological variables database 508, and personal information database514. The CPU 500 stores the information from the RIS 60 on UPIs and/orbiological variables in the alert database 512, and stores informationon interactions in the interaction database 510.

FIG. 6 also depicts an exemplary memory arrangement in which the productdatabase 506 includes a drug database in memory area 6A, a cosmeticsdatabase in memory area 6B, a baby/toy products database in memory area6C, a food products database in memory area 6D, a medical deviceproducts database in memory area 6E, and a miscellaneous productsdatabase in memory area 6F. The product database 506 includes the UPI,preferably the bar code numbers, associated with the usernames accordingto a preferred embodiment of the invention. The product database 506maintains a list of all products stored according to the productcategory, and contains records of each individual product with all ofits users according to the product category. Thus, each UPI may beassociated with a plurality of users. More specifically, the productdatabase 506 maintains data on products according to the categoriesincluding the drug database which contains the UPI for the drug identitytransferred by the user and all corresponding usernames of people usingthat drug. The cosmetic database contains the UPI for all cosmetics andassociated users of each individual cosmetic UPI. To further illustrate,the food database contains the UPI for food products and correspondingusernames associated with each food product, the medical devicesdatabase contains the UPI for the medical devices with correspondingusernames, the baby/toy database contains the UPI for the infantproducts and toys with corresponding usernames, and the miscellaneousproducts database contains the UPI for miscellaneous products andcorresponding usernames.

The user's product usage database 516 includes the name of the user 90and associated UPIs for the user 90, and maintains a list of allusernames stored with all of the UPIs associated with each individualuser 90.

The biological variables database 508 includes the values acquired bythe various HMDs 50, which values are located in memory area 6G. Thestandard normal values for biological variables are located in area 6Hwhich allows values transmitted by the user to be correlated with normalstandard values. Memory area 6I has the pathological diagnosisassociated with abnormal biological variables and is called the diseaseassociation area. The disease association area 6I contains an expertsystem concerning the diagnosis associated with the abnormal biologicalvariable, for instance, increased eye pressure indicating glaucoma,elevated blood sugar indicating diabetes, and so on.

The product interaction database 510 has updateable fields including themost commonly known interaction between products (UPI) and biologicalvariables. The data on interaction of drugs with biological variablesand other products (UPI for the product) is stored in memory area 6J,the interaction of drugs with food is stored in memory area 6K, theinteraction of drugs with cosmetics is stored in area 6L, and theinteraction of drugs with medical devices is stored in memory area 6M.

An example of the interdependence of these databases is as follows. If,for example, a user 90 performs an eye pressure measurement (to acquirea biological variable) at home with an HMD 50, as described by Abreu inthe aforementioned patent, and the eye pressure levels are transmittedto the central server 10 (or GPI), then the CPU 500 in the centralserver 10 receives the biological variables (eye pressure) and storesthe value in the biological variables database area 6G which is thenevaluated against the normal values area 6H. Since the values, forexample, are high, which is indicative of glaucoma, the CPU 500 searchesthe disease association database 6I for the criteria of eye pressureincrease, in order to identify the disease associated with thetransferred biological variable. In a more descriptive form, if the eyepressure is above normal limits (e.g., if it is above 30 in the righteye, indicating that the patient is at risk for glaucoma and blindness),then the system naturally informs the user about the risk of blindnessdue to glaucoma. In addition, the system then matches that information“increased eye pressure or glaucoma” against the various products (UPI)stored by the user at risk of glaucoma and checks whether any of theproducts in his/her database is contraindicated for someone withglaucoma. If any record representative of any UPI is associated with thecriteria glaucoma, a match is found and the information transmitted backto the users informing him/her that the product for which informationwas transferred is contraindicated for patients with increased eyepressure (or glaucoma).

As a second example, the user has stored under COSMETICS 6B a code for asteroid based-shampoo, then the system identifies the matching steroidproduct with a “contraindication glaucoma” as harmful and automaticallysends the appropriate alert to the user according to the principles ofthe invention. If, for instance, the user buys a moisturizer skin lotion(UPI ™2111211314) and later on, for instance, the FDA 130 sends awarning about a moisturizer skin lotion (UPI #2111211314) which containsunlabeled amounts of steroids, the data for “steroids” is checkedagainst the biological variables database 508 which contains theusernames associated with the disease, in this case increased eyepressure data which is labeled as glaucoma. The system then identifiesthe match “steroid lotion-glaucoma” as harmful and automatically alertsall the users of UPI #2111211314 and who also have increased eyepressure indicating that they are at high risk of blindness should theyuse the skin lotion. Since the information was received from the FDA 130and there is risk of injury/illness, all of the users 90 of the productidentified by the subject UPI will be informed about the newly foundinformation on steroids present in the skin lotion, thereby allowing allof the buyers of the skin lotion to know the risks related to continueduse of the skin lotion. The user with increased eye pressure is informedabout the dangerous situation even though he may not be aware of thefact that steroids can lead to blindness when the user exhibits abnormaleye pressure. The invention thus gives the information to the user evenwithout the user knowing the name or consequences of the ingredients orwarnings on the label. Furthermore, even if the user knew that steroidscould lead to blindness in someone with glaucoma, without the invention,the user would have to search through thousands of daily warnings andthen by chance identify the skin lotion he/she bought as containingunlabeled amounts of steroids.

Another example will further clarify and demonstrate the urgent need forthe invention. If the user for instance is prescribed a common drug forhigh blood pressure such as verapamil (a calcium channel blocker), theninformation identifying the drug is stored under the username of thatuser 90. If the same user 90 then buys and transfers to the GPI centralserver 10 under his username the code for grapefruit juice, theidentifier for grapefruit is entered and the system 1 identifies theharmful match verapamil-grapefruit juice and alerts the user about thedangerous interaction. “A bioflavinoid present in grapefruit juiceinteracts and inhibits the P-450 enzymatic pathway in the liver. Thedecreased first-pass P-450 metabolism increases the concentration ofverapamil with the consequent significant increased pharmacologicaleffect of the drug.” The increased effect of verapamil caused bygrapefruit juice can lead to severe hypotension and even a fatal eventdepending on the dose and patient susceptibility, in addition to a riskof car accidents due to impaired reflexes or fainting at the wheel, as aresult of decreased blood pressure caused by the harmful combinationverapamil-grapefruit juice. As soon as the harmful interaction isidentified, a warning message is sent to inform the user to avoidgrapefruit juice when taking verapamil. If the user had transferredinformation on orange juice, the system would not identify any harmfulinteraction between the orange juice and verapamil, and no warning wouldbe sent. The invention thus optimizes electronic transmission creating acost- and time-efficient system in which only relevant information issent to the user. The user does not need to know the meaning of theabnormal biological variable, nor does he/she need to be aware of theinteraction between products for which identifying information has beenstored. Furthermore, the user does not need to know that a product beingused can fatally or harmfully interact with another product being used.The system of the invention provides all of this life-saving andcost-saving information automatically, regardless of the knowledge ofthe user in regard to the products being used. If the user thenpurchases and transfers information on a certain product, even if theuser does not know the ingredients of the product, the system of theinvention will alert the user about potential interactions between suchproducts and other products for which there is identifying informationstored in the product database. In addition the system 1 informs aboutinteraction between that product and biological variables stored in thebiological variables database and/or the product and individualsensitivity, such as allergy with any product interactions newlyreceived from RIS 60 and stored in the interaction database according toproduct category and the principles of the invention.

FIG. 6 also shows the alert database 512 which includes data on harmfuleffects of products and harmful interactions stored in memory area 6N,data on beneficial effects of products and beneficial interactionsstored in memory area 6Q, and recall data stored in memory area 6P.Whenever any of the RIS 60 transfer a product alert, the CPU 500 of theGPI central server 10 receives the UPI information and stores the UPIinformation in the alert database 512 according to the type of effect(B=beneficial, H=harmful, or R=recall). The alert database 512 tracksand includes all of the data warning, product information and recallinformation on products (UPI) received/acquired from the various RIS 60ranked according to the level of importance/severity (e.g., 1 to 5) andaccording to the type of event (B, H or R).

The data on products (UPI) preferably is checked against the productdatabase 506. If the search process identifies codes (UPI) or namesstored in the products database that match the code (UPI) or name of theproducts received from the RIS 60, then the usernames under which theproduct codes (UPI) are identified are used to effect a subsequentelectronic transfer of the information/message on the products to theusername or IP address.

The CPU 500 preferably is programmed to automatically search the productdatabase 506 and use the UPI number as the search criteria. The CPU 500thus searches the product database to identify the same UPI number andthe users associated with that UPI number. The users are then identifiedand the alert information on such a UPI is transmitted back to all ofthe users of the product (UPI).

The data on products transferred from the RIS 60 also is checked againstthe biological variables database 508 and interaction database 510 ofthe users. If the search process identifies biological variables thatmatch the UPI information transmitted, then the usernames under whichthe biological variables are stored are used to effect a transfer of theinformation/message to that username. For instance, if userMr.ABC@IBM.com has transferred liver enzyme values using a HMD 50 fornon-invasive blood analysis and those values are elevated and consistentwith liver disease, then the disease association database 61 for theuser indicates “liver disease”. When the RIS 60 transfers informationabout the drug Rezulin associated with a “contraindication liverdisease” record, then the CPU 500 stores the data in the harmful alertdatabase 6N, and then searches the biological variables database 508 andin this case finds a match for the criteria. A warning therefore is sentby the CPU 500 to Mr.ABC@IBM.com about the drug Rezulin beingcontraindicated to patients with liver disease. In this case, the userMr.ABC was not using the drug Rezulin, and further search did notidentify the UPI for Rezulin associated with his username. In thismanner, the GPI system 1 acts in a preventive manner by informing theuser on what to avoid, and thus helping to preserve the user's healthand simultaneously saving money for the user, who did not waste hismoney buying an expensive drug which ultimately could harm him.

The personal information database 514 includes fields such as all thedata submitted by the user to the GPI server 10 during the registrationprocess including a unique username with its Internet address and codeand/or password. The user may send his/her name, but it is moredesirable to have the user remain anonymous and, for example, just usean e-mail address with a pseudonym. Each new registered user can also beassigned a unique user identification number. While the invention can becarried out with any address and preferably is carried out with only theelectronic e-mail address, optimal use of the features of the inventionmay require some additional information such as age, biometric elements,demographic information, address, medical information, personalinformation, family history, insurance information, primary care doctor,preferred and/or nearest pharmacy, preferred laboratory, and the like.If the user includes allergies to a certain product in his database, theproduct name and/or other identifier are then used during searching. Ifthe patient is allergic to peanuts, for example, but does not have UPIinformation related to a product with an undisclosed amount of peanuts,then any time a new UPI is sent by the user to the GPI central server10, that transferred UPI is checked against the identifier stored in theallergy field (peanuts), and if there is a match, (any peanut proteinpresent) then a warning is sent to the user who transferred the UPI. Ifthe user, on the other hand, has already stored in the product databasea certain UPI (e.g., 1212131), then if the GPI central server 10receives information from the RIS 60 that a certain product UPI 1212131was found to have undisclosed amounts of peanuts, then the searchcriteria “UPI 1212131 peanuts” is checked against the allergy fieldwhich identifies the user as allergic to peanuts. The CPU 500 searchesthe product database 506 and finds in the food memory area 6D a matchfor the criteria. This indicates that the user is both allergic tocontents of the UPI transmitted by the RIS 60 and also has storedinformation indicating that the user is potentially consuming foodcontaminated with peanuts. The CPU 500 then can transmit the informationback to all users of the UPI 1212131 as a warning for productscontaining undisclosed amounts of peanuts using the regular electronicinformation conventionally done for the non-peanut allergic users.However, for the users identified as allergic to peanuts and also usingthe product with a UPI indicating that it contains peanuts, then anurgent alert is transmitted by autodialing, paging, etc, in addition tothe electronic messages, since consumption of peanuts by such anallergic user can lead to a fatal event.

In another example, the user Mrs.LK20@hotmail.com transfers a UPI0911232425 related to a baby-toy product to the GPI central server 10,in this case the UPI for a certain portable crib. The CPU 500 of the GPIcentral server 10 is programmed to receive and store that UPI 0911232425with the respective username Mrs.LK20@hotmail.com in the baby-toydatabase 6C. The CPU 500 then searches the alert database 512 for anyinformation related to that UPI. In this example, at the time ofsearching, there was no match for the UPI in the alert database 512. Ifa few months later, recall information for UPI 0911232425 is transferredfrom the CPSC 132 to the GPI central server 10, then the recallinformation will be stored by the CPU 500 in the recall area 6P of thealert database 512. Any UPI stored in the alert database 512 isautomatically compared against the UPI information stored in the user'sproduct usage database 506, and if there is a match, the informationassociated with the UPI is transmitted back to the users. In thisexample, Mrs.LK20, although completely unaware of using a deadly crib,receives the information immediately upon the CPSC determination thatthe crib is unsafe or may have killed a child, as usually occurs whenthe product first causes injury and then is recalled. In addition toMrs.LK20@hotmail.com, all of the other users of the deadly crib areinformed about the fatal danger posed by the product. The manufacturerof the crib then can reach all of the users in the most inexpensive way.The company also minimizes any consequences or financial disaster thatit might have experienced had it publicly announced the recall. The costsavings become more readily apparent when one considers the company'svirtual obligation, without the system 1, to continue advertising the“wrong-doing” until every recalled crib is identified.

The present invention also saves time and effort that might otherwisehave been wasted on mass advertising on a regular basis. Additionalsavings are realized as a result of the consequent reduction in the riskof product liability suits and settlements, and the savings that arerealized by not having to pay health care and/or disability expensesrelated to the harm caused by the product. This also obviates therelated risk of going out of business under the resulting financialstrain, and the commercial embarrassment of having to publicize thedangers of the product. More importantly, however, thousands of innocentlives can be saved. Government spending also is reduced because anyrelated government-funded health care or disability benefits areaverted. The economy of the nation also benefits by saving the companiesfrom financial disaster or from going out of business, thus preservingjobs for its people. As can be seen, the present invention is extremelyuseful and vital not only for the user, but also the manufacturer andthe government, and it is quite inexpensively implemented, creating thereliable wide spread recall and information coverage system urgentlyneeded.

Considering the crib as an example, the recalled product is a level 4(meaning a fatal event can occur with the use of the product accordingto the information from the CPSC). MrsLK20@hotmail.com is then informedby not only electronic means but also using conventional communicationtechniques such as autodialing, paging, and the like. This is done tomaximize the likelihood that the critical information about the deadlycrib will reach the intended recipient. The system, as will be furtherdescribed, may even prevent the death of the first child, by informingthe user about the risk before the government even issues a recall.

In another embodiment, the GPI system 1 uses a PCT arrangement 156,which is a Public Computer Terminal, with bar code reading capabilitiesand connected to the GPI central server 10. The PCTs 156 are located inpublic places, such as post-offices, malls, grocery-stores, and thelike. Thus, any product user, even those who do not have a computerand/or are not a registered user, can send information to the GPIcentral server 10 concerning the harmful effects of products being used.The user, for example, may enter only the name of the product or theestablishment delivering the product, but preferably the UPI, which canbe manually entered or scanned with a bar code reader. The user thenfills out a simple standard form with type of effect B or H, and selectsfrom a menu of types of injuries/illnesses caused by the product, typesof problems according to product and the frequency of occurrence. Theinformation then is transmitted to the central server 10 (or GPI). If asignificant number of users report a harmful effect related to a certainproduct or establishment, the information is transmitted to the FDA 130,CPSC 132 or any other appropriate RIS computer 60. Anyone with access tothe Internet could transfer product warning information by logging ontothe GPI web site and by filling out the product warning form. In thecase of the deadly crib, if a certain number of users send warningsidentifying the crib as injuring a child, even if slightly, or as havingunsafe features as observed by the user, the information could betransferred to all of the users of the crib as a GPI alert, not an RISalert, allowing the user to better evaluate the product and, ifapplicable, take the necessary precautions in order to keep the productfrom causing injury.

An alternative exemplary embodiment can include a personal acquiredmedical database that includes beneficial, harmful, recall, andinteraction data acquired that relates to the particular medical statusof the user according to medical information and biological variablesstored as well as any relevant past medical or allergy history. If, forinstance, the user transfers blood glucose levels using appropriatedevices which indicate that this patient has diabetes, then all productsstored in the product database 506 for that user, and the biologicalvariables stored in the biological variables database 508 for that user,as well as all beneficial, harmful, recall, and interaction data forthat user that meet the criteria “diabetes” are also stored in thepersonal acquired medical database under “diabetes”. Thus, if the userwants to know what product data, biological variables data, recall data,interaction data, harmful effects data, and beneficial effects datarelates to the user's diabetes, the user can easily access theinformation which is stored under “diabetes” in the personal acquiredmedical information database. The user can also store any other personalmedical information or acquired medical information in the personalacquired medical information database.

The product database 506 also can maintain for each UPI a plurality ofdocument records, textual or multimedia, that are representative of theUPI stored. For example, the UPI for a certain drug has associateddocument records concerning the indications, known side-effects, knowndrug interactions, description, chemical formula, and the like, storedin the database for that drug UPI with the information beingcontinuously updated by a remote manufacturer computer 148.

It is understood that the transfer of data/information can be performedusing conventional encrypted transmission in order to increase the levelof confidentiality of the information. The GPI central server 10 usesthe communications interface 540 to communicate with the user and/or RIS60 with interfaces that support standard or high-speed connections withthe Internet. The GPI central server 10 transfers data to/from the user90 and to/from the RIS 60 including exchanges of messages withattachments such as files, video, graphics and audio which arecommunicated in a variety of ways, including a network interfaceelectronically connected with commercial on-line providers, orconfigured as a web site, electronic mailing address, World Wide Webinterface, direct link, and the like along with other conventionalphysically wired and wireless communications and for the purpose ofcompleteness conventional means such as facsimile, postal mail, voicemeans, pagers, and the like. Preferably, however, the electronic meansare provided via a communications interface that transfers data over theInternet. It also is intended that conventional authentication means canbe used in order to provide the authorized accessing and transferring ofdata. It also is understood that the database above described is only anillustrative system, and a variety of modifications, changes in databaseand field combinations can be made by those skilled in the art withoutdeparting from the scope or principle of the invention.

In accordance with an exemplary embodiment of the present invention,after the user acquires the UPI for a drug the UPI is electronicallytransmitted to the GPI server 10 and then to the product database 506and drug memory area 6A. For instance drugs “D1”, “D2” and “D3” arestored in the product database in the drug memory area 6A with theirrespective indications for the users of such drugs. For example UPI4546478 corresponds to D1 and is associated with Mr.ABC@mailcity.com,Mrs.DEF@whitehouse.gov and Dr.FGH@navy.mil. When a medical device “M1”is used, the individual unique product identifier UPI141618486 andrespective user 15,976 is stored in the product database in the medicaldevice memory area 6E. In this case, as an example, the username or IPaddress is assigned a unique user number. When the userMrs.Ethel@gpi.co.uk transfers information regarding two different typesof cosmetics “C5” and “C10”, the user Mrs.Ethel@gpi.co.uk appearsassociated with both “C5” and “C10” and this relationship is stored inthe product database 506 in the cosmetic memory area 6B. When a babyproduct “B1” is used, the UPI code number is stored in the productdatabase 506 in the baby-toy memory area 6C, and when a food product“F32” is used its individual identification number is stored in theproduct database 506 in the food memory area 6D, and so forth with itsassociated usernames and representative records.

The GPI system 1 can be used in a variety of environments, but sincedrugs, medical devices, cosmetics, toy/baby products, and food definethe main sources of harmful products and recalled products, those arethe ones referred to in this part of the description. This invention, ofcourse, is not limited to such products, especially since virtually anyproduct could be recalled or considered harmful, in which case, therewould be a need to identify the affected users and locate and alert themas well, in accordance with the principles of the present invention.

Besides the common products described above, a variety of biologicaldata or biological states or biological functions such as temperature,weight, visual acuity, blood pressure, eye pressure, blood glucoselevel, chemical analytes in the blood, DNA fragments, as described inpatents by Abreu and the like, can be used as biological variables.Common products or medical devices which alter these biological statesand biological variables also can be used according to the inventionsuch as the implantation in living tissue of chemical substances,devices, artificial prosthesis, radio active seeds, and the like; theexternal placement on living tissue of devices such as hearing aids; theinteraction of chemical compounds with living tissue such as cleaningand sterilizing substances; the manipulation or modification of livingtissue such as with invasive surgical procedures and the like. It isalso understood that any prosthesis, chemical substances, devices or thelike will have appropriate identification number and codes which can beoptically encoded for identification with subsequent acquisition by theIECLD 40 or GPI card 39A and then the data on a particular medicaldevice transmitted to the GPI server 10 for storage in the database.

For example, if a certain type of prosthesis is later found to come froma lot which is contaminated, the patient would be sent a warning andinstructions on how to proceed. The same would apply to defectivematerial which could be found in intraocular lenses, defective circuitsfound in pacemakers, chemical substances implanted in the body such asaltered silicone which was found to cause cancer, defective collagenimplants used in cosmetic surgery which caused severe inflammation dueto the material in that particular lot, defective sutures or staplesused inside the body or outside the body which caused severegranulomatous reactions, stents used in vascular surgery that came froma particular lot and then later were found to easily crack and leak,defective X-rays and imaging devices which were used by a variety ofpatients and later found to have exposed the patients to a harmfulamount of radiation, whitening gel to be placed on teeth while sleepingcoming from a tampered lot which were found to cause severe allergicreactions and to be caustic, cream for the treatment of skin disorderswhich were later found to cause permanent skin thickening and potentialsevere skin reactions, cosmetics which were later found to come from acontaminated lot and caused corneal ulcer and blindness, color additiveswhich were later found to cause severe neurotoxic reactions, certainfood from a certain lot which was found to be contaminated with E. coliand caused severe disease and even death, ineffective vaccines whichwere later found to come from a tampered lot, and the like. It isunderstood that any products that have a particular identificationnumber could be optically encoded, tracked, identified and located usingthe GPI system 1 with the individual user 90 being appropriatelyinformed and instructed in regard to potential health hazards related tosuch product.

All of the biological variables and/or products (UPI) transferred by theuser 90 to the GPI server 10 are stored in the GPI database 504 underthe code or username for that user, allowing the information in regardsto that user to be continuously updated by the user 90. If the user 90deletes, for instance, drug Y from the list of drugs being used, thatinformation is sent to the GPI server 10 which then will delete drug Yfrom the GPI database for the user 90, allowing the GPI server 10 tocontinuously update the GPI database, keeping track of new informationwhich is added and old information that is deleted. For example, inanother embodiment when a manufacturer of a pharmaceutical product orthe FDA sends a warning to the GPI server 10 about a product P, allusers of product P stored in the GPI database will receive the warning.When the user of product P logs into the GPI web site, the user receivesautomatically the stored messages in the GPI database on product P, oralternatively when the user of product P logs in the GPI website, theuser is informed that there is a warning about product P stored in theGPI database 504 which should be retrieved or there is an e-mail alerton product P that should be retrieved. In accordance, a duplexcommunication channel can be created in which individuals using productP automatically receive information related to product P from the GPIserver 10 and the individual using product P can receive automaticallyor interrogate the GPI server 10 in regards to any information whichdirectly or indirectly relates to product P and that could have aneffect on the health status of that individual. In this embodiment, theGPI System is used as a locator and information source which allowsimmediate delivery of information to individuals using product P. Incase that post-market surveillance identifies a new side effect or newdrug interaction, then all patients using drug product P, for example,automatically receive information related to the update. The electronicautomated location and information system of the present inventionallows millions of users at risk of life-threatening event related tothe unintended harmful effect of drugs and other products, tosimultaneously receive lifesaving information using a timely, private,individual, confidential, orderly, precise, continuous, reliable,low-cost and cost-efficient system.

In another exemplary embodiment shown in FIGS. 5C-5F, the IECLD 40 isbrought by the user to the point-of-prescription of the product orpoint-of-care or point-of-sale or point-of-receipt orpoint-of-transaction. For example, the user 90 will bring his/her IECLD40 to the pharmacy where the user is purchasing a variety of productsincluding drugs. The user 90 may decide that he/she only wants toacquire information on the drugs and cosmetics being purchased, but noton some consumable items as candy, milk, and other readily consumablefood items. The invention thus allows the user to decide which productsthe user would be interested in receiving information and/or recalland/or alert information concerning. The user 90 can simply scan onlythe products of his/her interest to be stored in the GPI server 10. Onthe other hand, if all of the products purchased are being scanned atthe point-of-sale by a clerk or at the point-of-care by a healthprovider, then applications can be used to select only relevant productsto be transferred and/or stored in the GPI server 10. This alternativemanual selection or automatic selection of products to be stored isuseful in avoiding the storage of excess or useless data.

In an example for acquiring identification about a prescription drug forappetite control, the user brings his/her IECLD 40 to the pharmacy. Thepharmacy has a table with various UPI bar codes for each drug, orpreferably each package will have the newly created UPI identifier barcode imprinted or the pharmacist can manually type in and send the drugidentifier code to the central server 10. The user enters his/her ID andpassword, and then the unique barcode for the drug is read and the datais stored and displayed in the display of the IECLD 40. Alternatively,the user may access the GPI web site and enter the bar code numberdirectly to the GPI server 10 and database under the user's name.Alternatively the user may provide his/her code and enter his/herpassword and the data sent directly from the point-of-prescription(pharmacy) to the GPI server 10 station to be stored under the username.Alternatively, during a purchasing transaction and payment of goods, thebar code is scanned and the data is directly transmitted from thepoint-of-sale to the GPI server 10 station via conventional orelectronic communication lines. Alternatively, the pharmacy(point-of-transaction) sends the UPI directly to the GPI server 10 whenthe patient fills a prescription regardless of the patient having aportable unit 40 as the IECLD 40. In this instance the user has all ofthe information stored in the server 10 with information directlytransmitted from the pharmacy. In countries like Japan in which thedoctor may act as a pharmacy and provide the drug directly to thepatient, the doctor's assistant can enter the new data into the portableIECLD 40, and the information is transferred to the GPI server 10 at thepoint-of-care, in this case the doctor's office or alternatively thehospital. The IECLD 40 can be interfaced with a printer in the doctor'soffice and an updated drug regimen printed and given to the patient,and/or a prescription slip may be printed if needed.

In another embodiment the user may carry a smartcard 39A which canacquire and store the product identification data for subsequenttransmission of the product information to the main GPI server 10. Inanother alternative embodiment the users carries their smartcardconsisting of a GPI smartcard 39A which contains information on the userwhich identifies the user, and for instance when the user purchases aproduct such as drugs, at the point-of-sale during check-out at thecashier, the GPI smartcard 39A is entered or scanned, then products arescanned and the data on the drugs (or any selected products) beingpurchased is automatically transmitted from the point-of-sale to the GPIserver 10 and stored under the username for the GPI smartcard 39A.Alternatively the GPI smartcard 39A is placed on a receptacle at thepoint-of-transaction for acquisition of the unique product identifiercodes with the user being able then to later select what products orgroup of products stored in the smartcard 39A will be transferred to theGPI server 10 or CCC 80 for storage, thus allowing the user to laterselect, and then transfer the data. It is intended that any physicaldata memory device besides a card can be used to acquire the productidentifiers such as floppy disks, hard disks, optical disks,opto-magnetic disks, tapes, CDs, cartridges, semiconductor medium, andthe like for later transmission to the server 10 or to communicate withthe server 10. Furthermore, any of the input/output devices can beconnected to a printer 39F for printing a list of the selected productidentifiers transmitted with or without an associated bar code printed.If the bar code is printed, the user can then take the printed bar code39H and later scan the printed bar code at the user's domicile.

When the IECLD 40 interfaces with the home-monitoring devices (HMD) 50and a connection is established between the user 90 and the GPI server10, the user 90 can transfer the biological variables to the GPI server10 with the data acquired being transmitted to the GPI server 10 andstored under the biological variables (BV) 508 for that particularusername. For instance if user Mr.XYZ has an eye pressure of 28, a bloodpressure of 140/90, a blood sugar of 210, an average temperature of 98.6F., and a weight of 250 lbs., then all of this data which is acquiredfrom the home-monitoring devices (HMD) 50 is then transmitted to the GPIserver 10 and stored under the BV database 508 for Mr.XYZ with addressMr.XYZ@TYG.net. The GPI server 10 then checks to see if there are anymessages, warnings, information, recall or Web pages related to theproduct's UPI code or if there are any potential interactions betweenthe biological variables stored and the products used by a particularusername stored in the GPI database, with such information as whatbiological variables can interact with the effects of drugs, food, andthe like, and vice-versa.

In accordance, in an exemplary embodiment, a patient is prescribed adrug called Dexfenfluramine (Redux®) as an appetite suppressor. In thisparticular embodiment the patient enters his personal and demographicdata in his portable unit 40 or, alternatively, the patient can enterthe same data by using any personal computer system 30, with the initialdata including a username and/or IP address which uniquely identify theuser. Although the patient could enter his own name, it is preferablethat the patient enter a pseudo-name in order for the medicalinformation to remain confidential and not be associated with thepatient's real name. This is an advantage of the recall system asdisclosed in the present invention which preferably uses the user'spseudo-name and Internet address to inform the user about a recalledproduct that the user is utilizing. Thus, the invention allows the userto remain anonymous during the entire process of acquiring, transmittingand storing his medical data and then receiving the recall information.Thus the patient Mr. Gerald M. M. Jones enters his name asMr.XYZ@GPI.org or Mr.XYZ@TLJ.net or Mr.XYZ@Yale.edu and the like.Subsequently, the user, optionally, enters his age and other personalinformation, as well as type of health plan and medical informationrelated to pre-existing medical conditions and current medical therapyand/or medical diagnosis. It is understood that although the patient caninput as much personal/medical data as he/she wants, the system of theinvention can be carried out, in the preferred embodiment, by simplyhaving a username as defined by the principles of the invention.

In a preferred embodiment Mr.XYZ also has means to acquire data relatedto his biological variables and/or has home-monitoring devices 50 withIECLD-like features and means to transmit the data to the main GPIserver 10 either directly from the home-monitoring devices 50 or byusing the portable unit 40 which, in a preferred embodiment, acquiresthe signals from the various home-monitoring devices 50. Although thepreferred embodiment uses biological variables acquired by home devices,it is understood that biological variables acquired in other places,other than the user's domicile, such as doctor's office, hospital, andthe like, can be used with the data thus acquired and transmitted forstorage in the main GPI server 10. Although the preferred embodimentuses acquisition, transmission, and storage of biological variables forthe particular user, it is understood that the system of the inventioncan be carried out simply with the acquisition, transmission and storageof the products being utilized by the user.

After entering personal/medical data, the user is requested to choose aPIN or password and login name, preferably the username for exampleMr.XYZ, with all of the above information being stored in both theportable unit 40 as well as transmitted for storage in the main GPIserver 10, creating a file for Mr.XYZ in the GPI database stored in theuser's personal information database 514. Subsequently, the GPI centralserver 10 is ready to acquire, process, transmit and receive any data orinformation concerning products being used and/or biological variablesbeing acquired on Mr.XYZ according to the principles of the invention.In the exemplary embodiment, Mr.XYZ was prescribed Dexfenfluramine(Redux®), and thus the Dexfenfluramine UPI, which uniquely identify thatparticular package and specific contents of that package, is acquired byreading the bar code symbology with a bar code reader of the portableunit IECLD 40. The data acquired by the portable unit 40 is thentransferred to Mr.XYZ computer system 30 which in turn is connected tothe Internet 100 and the data further transmitted to the GPI server 10for storage as, for instance, under Mr.XYZ@GPI.org in the drug database6A having file Dexfenfluramine and/or code 090911919.

Although the use of optically-encoded symbology provides the mosttime-efficient, orderly and virtually error-free system as used in thepreferred embodiment, it is understood that the user can enter andtransmit this data in a variety of ways including wireless acquisitionand transmission, keyboard entry, physically wired connection, and thelike, and alternatively the pharmacy or any point-of-transaction cantransfer the information. In some cases the user of the product can usethe serial number of the product which is already in the package andmanually enter the data into a conventional computer system fortransmission to the GPI server 10.

A further example will illustrate the value of the present invention.Mr.XYZ has moved to another state or country and has about a year'ssupply of his Dexfenfluramine (Redux®) or, in another scenario Mr.XYZwill be on a trip abroad for the next 4 months. Suddenly, duringpost-market surveillance, the FDA uncovers potentially fatal adversereactions caused by this drug Dexfenfluramine (Redux®) and issues arecall. The drugs from the pharmacies are recalled, but the ones alreadybeing used are still out there being used by millions of patients acrossthe world. Expensive printed matter to health care providers andinstitutions are distributed, but there are no means in the prior art toaddress and identify the actual individual unique user of the product,and thus unfortunately the actual user cannot be directly addressed andis at risk of injury/illness and death. As mentioned, publicannouncement recall through media is used in order to alert patients tostop using the drug with the dire financial consequences to themanufacturer and distributor who now have to go public and basicallyadmit that they have made a product that may harm or kill people.Furthermore, this system is quite ineffective and neither identifies theindividual user nor identifies all the users of the product. With thepresent invention, as soon as the FDA 130 issues even a warning or arecall for the drug Dexfenfluramine, the recall information isimmediately and preferably electronically transmitted to or acquired bythe GPI server 10 as Dexfenfluramine code 090911919, and the GPI server10 automatically stores the recall information acquired in the alertdatabase 512. Each time the server 10 receives product information, theserver 10 checks its database for users of the product. In the casedescribed regarding the recall of Dexfenfluramine, the server 10searches its database to identify all users of Dexfenfluramine code090911919 and, after the users are identified, the recall notice isinstantaneously and automatically and electronically and privately sentto all users of the drug alerting them about the fatal risk involvedwith the use of the drug, with electronic transmission preferably doneusing conventional e-mail. The system of the invention can then timelylocate and alert all of the users using immediate electronictransmission of information regardless of the user's physical address oreven if the user has moved and/or is lost to medical follow-up or is ona trip abroad in Mongolia. The system thus provide means to locate eachuser individually by using an exclusive unique name and address, as theInternet address. The real name of the user of the drug remainconfidential and the name of the company with the recalled product hasminimal public exposure since it can privately address the users of therecalled product and thus preserve the company's name.

Returning to the example of Mr.XYZ, he is travelling abroad and hasbasically no means to know about the recall in his country of origin.However, Mr.XYZ can have continuous access about recalled products thathe is using by either using his portable IECLD 40 unit with connectionto the Internet 100 or has means to connect to the Internet 100 withconventional computer terminals 30. Then as soon as Mr.XYZ either checkshis regular e-mail; or web-based GPI site e-mail; or logs in the GPIwebsite and enters his password, the specific information (not random)on the recalled drugs that Mr.XYZ is using is disclosed and displayed onthe display of his computer device.

The GPI system 1 thus allows any remote user to access the informationon potentially harmful products being used by the user. Besides warningabout the fatal risk with the drug, the system also instructs thepatient on how to proceed. In this case a particular formulation of thedrug-type Dexfenfluramine was later found out, after almost two years onthe market, to cause severe and potentially fatal heart disease byaffecting the valves of the heart. In response to that, the GPI system 1instructs the patient about alternative products, actions to be takenincluding how to stop the drug, and the need to see a heart specialistand to have an echocardiogram done. The GPI system also automaticallycontacts the patient health care provider and schedules an appointment,contacts the hospital and laboratory and schedules the test(echocardiogram), and contacts the patient's health plan for approval ifneeded for the tests and appointments. The GPI system 1 sendsinformation on the recall to the health care provider (doctor) with thename of a replacement for the recalled drug and a list of patients usingthe drug with the phone number of the pharmacy for each patient. ThisGPI function provides an important service to the doctor. The doctorreceives the names of patients, thus the doctor does not have to reviewcharts to try to find out if any patient is using a recalled drug. Inaddition, as mentioned before, this is impractical. The doctor alsoreceives the phone number of the pharmacy for each patient, and thus thedoctor does not need to call patients and search to find out whatpharmacy to call for prescription concerning the replacement drug.Simultaneously the patient using the recalled drug receives a messagethat the his/her doctor has been contacted and a prescription filled athis/her preferred pharmacy, including a message to “call the pharmacy tofind out if the replacement drug is available for pick up”. The GPISafety Program thus provides a complete, efficient and low-costcomprehensive prevention and treatment of illness/injury caused by aharmful product. Furthermore Mr.XYZ will have an option to fill out anelectronic questionnaire about cardiopulmonary symptoms and othersymptoms in order to better assess the level of urgency for medicaltherapy since Mr.XYZ is travelling abroad. The present invention alsoprovides a complete set of instructions according to official andmedical recommendations such as the need for antibiotic prophylaxis whenMr.XYZ undergoes a dental or medical procedure in case he has the heartvalve disease caused by the harmful drug.

The GPI system 1 has the ability to continuously locate a patient andalert the patient about potential problems with the products they areusing. For instance, patients who have had permanent implants are oftenlost to follow-up, with the doctor being unable to locate the patientand inform about the complications related to the product being used orimplanted. Even if the patient moves, change addresses, or simply cannotbe reached, an update about the prosthesis permanently implanted couldbe sent to the patient as long as they have their IECLD 40 or access tothe Internet 100 and log onto the free GPI web site. If the patient hasaccess to the Internet 100 and knows the UPI code number or name of theproduct, then the data can be entered using a keyboard and the patientcan access its GPI server 10 file or general recall information at theGPI web site. Patients usually carry a card identifying the number ofthe prosthesis which was implanted and can check the information relatedto the prosthesis. The same also would apply for patients receivingliving issues such as kidneys or any other type of transplant. If thesubject who donated the organ was later identified as having atransmissible disorder such as viral disorders, the recipient of theorgan could be notified and instructed how to proceed.

If the user is buying or using a product which does not have a UPI, theuser can enter the name of the product and, if a recall notice has beenissued for that product, the GPI system 1 will match the name againstits database and identify the product with the consequent recall alertsent to all of the users of the product. If for instance the user isbuying products over the Internet, then the product purchased can betransmitted to the GPI server 10 using conventional applications. Forexample, if a vitamin being sold over the Internet were being recalled,the user of the GPI system 1 could, before actually purchasing theproduct, send the information to the GPI server 10 which would returnany recall or information available on the product. Thus, by alertingthe user before the user purchases the potentially harmful product, theuser saves money and avoid health risks.

While the system is being described in connection with human use, it isunderstood that veterinary and other non-human use is anotheralternative application of the current invention in regards toidentification and location of harmful or recalled products.

One aspect of the invention provides a system composed of HTML documentsand information transfer using Hyper Text Transfer Protocol (HTTP).Although the exemplary embodiment uses data communication using HTTP,other protocols such as FTP, Gopher, XML and other emerging protocolscan be used to transfer recall, harmful or beneficial information onparticular products being used by a particular user and biologicalvariables for the user. Although the exemplary embodiment uses HTMLdocuments, it is understood that many other types of documents can beused, including but not limited to Adobe PDF, motion pictures, stillpictures, voice or any other means related to the provision ofinformation about potentially harmful or beneficial products, recall andinteraction information.

FIGS. 7A-7E are exemplary diagrams showing second, third and fourthwindows opened on a user's computer. FIG. 7A shows electronicinformation converted to an HTML document depicting an exemplary homeweb page for the free web site, GPI Recall, Location and InformationSystem, as it appears on a computer system 30 display screen or aportable IECLD 40 device with Internet and HTML capabilities for bothregistered and non-registered users. FIG. 7B is an exemplary diagram ofthe electronic alert and recall documents with hyperlinks displayed on acomputer of a registered user. A secured page “GPI ProductsAlert/Recall” (accessed only by the user of products presented in thatpage, after appropriate identification is confirmed) with information onproducts used, biological variables, and information on recall andeffects (harmful and beneficial) is shown. The information about thevarious products used by the user and associated hyperlinks aredisplayed on the document. To illustrate in more detail this particulardocument, the “GPI Products Alert/Recall” document shows a box with theitemized product groups being used by Mr.XYZ which can be individuallyaccessed by point-and-click. A second box in the same document shows thecurrent information on recall or warnings for the products used byMr.XYZ with the product name and group in one column and the informationabout the product in a second column with its associated hazard degreecode, all of which accessible by point-and-click. FIG. 7C is anexemplary diagram of a non-restricted document on recall and alert,displayed on a computer of a non-registered user. FIG. 7D is anexemplary diagram of biological variables with hyperlinks, displayed ona computer of a registered user. In FIG. 7D, a portion of the secureddocument Biological Variables for the particular user is shown with thevalues measured and the links to the various potential interactions ofproducts being used with the biological variables measured. FIG. 7E isan exemplary diagram of a document displayed on a computer of aregistered user with a variety of hyperlinks to manufacturer andgovernment computers. A portion of the page, Recall Info, shows text andHyperText illustrative of recall of a certain drug with links todocuments relevant to the recall such as, to the manufacturer, to therecall government agency, and links to support groups, information onthe medical condition, how to get a doctor's appointment (with bothdoctor's located in brick-and-mortar offices or Internet offices) andscheduling of laboratory test (echocardiogram) and insuranceinformation. The portion of the document, Recall Info, also has linksfor registered users to access personal and confidential informationsuch as previously scheduled appointments and insurance approval.

The registered user can access the personal and private information onrecalled products used in different ways. One preferred way includes theuser checking his/her GPI web-based e-mail, and in this case the userreceives in his/her e-mail box all of the secured pages related towarning and recalled products such as GPI Alert/Recall document (7B),Biological Variables document (7D), Recall Info document (7E),appointment and insurance information, and the like. Another way is forthe user to log onto the GPI web site and with his/her password accessthe same personal/private information, as described above, on productsbeing used, biological variables measured and alert/recall informationon these products. A further way to retrieve the personal/privatealert/recall information is by reading his/her conventional text e-mailmessages.

The information on products used, biological variables and personalappointment information is in a secured area accessible only by the userof the products. Alternatively, the page Search and Recall Info (FIG.7C) represents non-secured documents and can be accessed by anyonesimply by logging onto the GPI web. Thus, the GPI system provides a freeservice to both registered and non-registered users. However, theregistered user does not have to search for recalled products or warningor information on products being used, since the GPI system 1 deliverssuch information on products being used to registered usersautomatically. This is in addition to all of the other numerousadditional advantages such as information on the beneficial effects ofproducts being used.

This system helps companies reduce their exposure to the financialdisaster that may occur as a result of publicly announced recallsthrough the media as previously explained. Moreover, the companies andgovernment agencies avoid the significant costs associated withconventional printed, televised and audio recall and warning aboutpotentially harmful products.

The system of the invention searches and/or acquires data from thevarious RIS 60 not only about the harmful effects of products, but alsothe newly found beneficial effects of products. For instance in FIG. 7the document Alert/Recall 7B shows in the product column D1—“Verapamil”and under information “beneficial”. In this particular case, a RISResearch Institution 60 and a RIS Medical Institution 60 transferredinformation that verapamil was found to decrease eye pressure. Thispatient has hypertension and is using this drug verapamil to treat hishypertension. This patient also has abnormal and elevated eye pressure.The information indicating that verapamil decreases eye pressure ischecked against the users' database, and since this user has glaucomawith increased eye pressure, the interaction product-biologicalvariables is considered beneficial and the information is transmittedback to the user as previously described.

The GPI website also offers a unique feature called “Spend more timewith your doctor”. Doctors have an enormous amount of knowledge andinformation, but in the U.S. patients only spend an average of 8 minuteswith their doctors. Thus, many questions and concerns about drugsprescribed or other products used go unanswered. As soon as the productis added to the users' usage record in server 10, the information on theproduct is transmitted to the user 90. The information that could havebeen acquired by talking to the doctor is sent to the user, givingvirtual extra time with the doctor. This is done at the user'sdiscretion and the user may choose not to receive such of productinformation.

FIGS. 7A and 7B also show the GPI home page 7A linked to the GPIAlertRecall page 7B by means of link (i) which in turn is linked todocument Biological variables 7D by link (ii). Document GPI Alert/Recall7B is also linked to page Recall Info 7E by means of link (iii). Homepage GPI 7A is linked to Search page 7C by means of link (iv), which inturn is linked to page Recall Info 7E by link (v). Although the linksshown relate to text document only, it is understood that images,videos, sound, programs or any binary data link can be implemented andused. For example, the HyperText surgical correction can be linked to anactual video of a heart surgery with valve replacement, which gives moreinformation for the user of recalled products while allowing the usersto seek immediate therapy and better evaluate all of the potentialaspects related to the delivery of health care for his/her medicalcondition caused by the harmful product. It can be easily appreciatedthat the principles disclosed in this section can be applied to anyproduct including but not limited to the main product groups (drugs,cosmetics, food, medical devices, toys/baby products, and miscellaneous)and the user informed about the potential hazards and recalls associatedwith the products being used. It is clearly also noted that the figurespresented are simply a way to illustratively describe one of theembodiments of the present invention, but obviously there are numerousother ways to display and deliver the information and many variationsall of which can be used in the present invention. Moreover, inaccordance with the principles of the present invention, userapplications such as a web browser can set up a connection to the remoteGPI server 10 in order to retrieve the information on potentiallyharmful products that is requested by a user. As an example, a userbrowser application displays a hyperlink associated with documentsrelated to the recall/warning and information system for a unique user,which can be selected with another document being retrieved over theInternet from the GPI server 10 in which case the GPI server 10, acts asa HTTP server 10. It is understood though, that the present inventioncan be employed with other types of user and GPI server 10 applicationsallowing access to certain sources and certain data over the Internet100 with the data and/or sources relating to harmful/beneficial productsand/or recall/warning information. It is also understood that the user90 and server 10 computing systems according to the present inventioncan include a variety of operating systems and commercial applicationsto assist the implementation of the needed acquisition and transfer ofinformation related to the potentially harmful products with creationand transmission of messages.

Besides informing the user about the harmful effects of products, theGPI system also informs the user about the potential beneficial effectsof the products being used. If Mrs.XYZ has stored in the GPI databasethat she is age 50 and using estrogen replacement, the GPI system 1identifies that association as beneficial since during post-marketsurveillance the GPI system 1 has acquired from RIS 60 informationindicating that estrogen use in post-menopausal women reduces death fromcardiovascular disease.

In another embodiment the user has stored in his/her personalinformation database that he/she has a family history of Alzheimer'sdisease. Information about a drug that helps Alzheimer is transferredfrom the RIS 60 to the GPI system 1, indicating “low doses ofrisperidone, regularly prescribed for schizophrenia was found to helprelieve symptoms in Alzheimer's patients and may delay hospitalization.Please consult your doctor.” In this instance, although the user doesnot have Alzheimer, since he/she has a family history of Alzheimer theinformation is sent to said user which allows the user to better carefor a family member with the disease. This information could also beuseful to the doctor who may not be aware of the potential beneficialinteraction, and the information is also passed on to the doctor.

Another embodiment relates to use of the system not only by patients,but also doctors, medical institutions, and the like. In an exemplaryembodiment, doctors who prescribe certain drugs and medical institutionswhich use certain devices could easily acquire the unique UPI for thedrug or device and send the unique UPIs to the GPI server 10, allowingthe doctors and medical institutions to have updated information inregards to the products being used by the practitioners and/orinstitutions. Furthermore, although the present invention can bepreferably used by an individual user of a certain product,alternatively the current invention can be used by the providerprescribing the product or the institution delivering health care or theestablishment selling the product. In this alternative embodiment thehospital, providers, establishments, seller, distributor, and the likesend the information on the products to the GPI server 10 and receivefeedback specifically tailored to the products being used or deliveredor sold by the practitioners and establishments. For example, if adoctor prescribes risperidone on a daily basis, then the doctortransfers the UPI according to the principles of the inventiondescribed, and the information is stored in his/her database. In thisembodiment the UPI stored relates to drugs being prescribed by thedoctor, and not the UPI for drugs personally used by the doctor. Thenwhen new information related to risperidone such as beneficial effects,harmful effects, and recall information is transferred from the RIS 60to the GPI server 10 according to the principles of the invention, theinformation is then automatically electronically sent to the doctor asan alert message. Naturally, the same information and updates wouldapply to all of the commonly used prescribed drugs by the doctor whichare stored in the user database as products being used. In addition theGPI server 10 can send Safety Alerts and labeling changes for drugsaccording to the doctor prescription pattern. Thus this alternativeembodiment is an incredibly useful tool for any doctor helping todeliver the specific information that the practitioner needs accordingto his practice and prescription patterns. In this case the doctor couldhave two registered names: Dr.X20@GPI.org in which the user/doctorstores in the product and user database the names of drugs commonlyprescribed, and then have another registered name Mr.X20@GPI.org inwhich the doctor stores in the user and product database his personallist of drugs and other products being used. This thus allows the GPIsystem to meet both the personal as well as the professional needs ofthe user.

If a product that is uniquely identified with a code or its name istransferred to the GPI database by a registered user, that code or namecan be stored in the Miscellaneous database 6F. Then the registeredusers of the products, according to their preference, will receiveupdates tailored to the products stored under their username, such asbut not limited to, software downloads and updates related to therecalled product stored in the GPI database, links to Internet resourcesrelated to the product stored in the GPI database, and the like. Thissame alternative embodiment could be used by a merchant or medicalinstitution interested in receiving updates and information about aparticular group of products being sold or delivered. In an exemplaryembodiment, a restaurant serving fish will have in the products databaseFood the types of fish being served by the restaurant, and then if anyof the RIS 60 send information for example stating “cod found todecrease blood pressure”, then that information could be used for thebenefit of the customers eating at that restaurant. The restaurant candisclose in the menu that according to source FDA 130 cod was found toreduce blood pressure. Then a customer with high blood pressure can makean educated choice concerning his/her health and choose cod and thusbetter control his/her blood pressure. On the other hand, the customerwith low blood pressure or taking drugs to lower blood pressure can makean educated and healthy choice of not eating cod since that couldaggravate his/her status, potentially leading to lower pressure,dizziness, and even a car accident due to the exceedingly low bloodpressure caused by eating cod. In another exemplary embodiment, a farmerusing a certain fertilizer will have in the product databaseMiscellaneous a memory area for chemicals, or alternatively the drugarea memory can be used as chemicals and drugs. Then the RIS 60 providesinformation concerning the type of fertilizer used by the farmer stating“fertilizer FZ found to be mostly beneficial in crops, such as corn, andactually detrimental to wheat.” In this case the farmer then can use theinformation to optimize production since the GPI System 1 deliveredvaluable information for increasing crop production specificallytailored to that individual user. Since the GPI system 1 only useswell-founded and proven information and data from well recognizedestablished government and private institutions, the informationacquired from the RIS 60 can be considered sound and valid, and thusvery useful.

Although much less frequent, harm by a product can occur in a very oddmanner, and the present invention can prevent even these unusual harmfulevents. More specifically, a book purchased in the USA by a user whowent back to China had a printing error that could cause harm. Withoutthe present invention, the user would never learn of the harmfulprinting error. However, with the present invention the user in Chinareceives the Alert message stating that “the combination proposed forexperiment 12 about x-ray may pose a serious radiation hazard, pleaserefer to the enclosed information for the correct sequence for theexperiment”. Although, only a few exemplary alternative embodiments aredisclosed herein, it is intended that the current invention can be usedwith any product, subjects, articles, and the like, tangible ornon-tangible items, which have an identifier indicia, belonging to ordelivered or acquired by any individual, establishment, entity, and thelike, with data and information preferably transmitted to the user viathe Internet or a public network according to the principles of theinvention.

The GPI system 1 is also designed to acquire information from the user90 which may be significant from a warning or recall standpoint. The GPIsystem 1 uses biological variables to determine if a certain UPI producthas been consistently and temporally associated with an abnormalbiological variable. In the case that hundreds of users using a certaindrug PPS transfer biological variables consistent with abnormal heartrate, then the data meet the criteria for potential harmful effect ofthe drug PPS. This information can then, for example, be transferred tothe RIS 60 as “drug PPS potentially implicated with abnormal heartrate”. In this scenario the GPI system 1 acts as an auxiliary in thedetection of harmful products. The same approach applies to thedetection of a certain plant number or lot numbers causing widespreadillness or injury. The information thus can be used for locating plantsfor inspection. The system 1 can also identify contaminated food beforean outbreak occurs. The users can transmit information to the GPI system1 about their symptoms and comments on the product such as labeling,appearance, questionable ingredients, and the like. When a certainnumber of users report similar symptoms after ingesting the same food,the GPI system 1 identifies a potential outbreak. The system GPI 1 thencan transfer this information back to the RIS 60.

As previously stated, the GPI arrangement is designed to be a completelyfree-of-charge system to any user of any product, but for the sake ofcompletion of the description of the invention, a few exemplarycompensation methods are described. Naturally the transfer of UPI orbiological variables or receipt of keys may only occur after theoccurrence of appropriate transfer of funds to the GPI server 10 and/orto a third party. Furthermore, appropriate transfer of funds to the GPIserver 10 and/or a third party may be required at any time and may occurat any of the steps described in this whole specification. It is alsounderstood that a tracking arrangement for the number of requests and/orinformation delivered or acquired by either the user or/and the RIS 60can be used as a means to quantify and charge for the utilization of thesystem. There are herein described only a few embodiments andmodifications concerning environmental as well as compensation issues,but it is understood that the invention is capable of use in variousother environments in conventional messaging and broadcasting, as wellas in any ‘cyberspace” environment based on the Internet and using avariety of payment methods and account databases. Naturally it isunderstood that the user can block receipt, or select products andconditions for which the user wants to receive information, messagesand/or web pages.

The system is constructed as a pure electronic system with no inventory,nothing to ship, and no warehouse. The system can provide personalizedadvertisement according to product identifiers and sales of replacementproducts as substitutes for the recalled products. Participant companiesinterested in offering the GPI Safety Program to their customers canbenefit by being able to sell alternative replacement products to thecustomers who purchased a harmful or recalled product. In an exemplaryembodiment a company recalling a harmful product can offer, in the AlertMessage or in any electronic means to report the recall alert, analternative product that is proven to be safe or a newer more advancedmodel. In case the company recalling the product does not have analternative product, the GPI system 1 will offer replacement productsfrom other participating companies or non-participating companies.

The above financial benefit offering a new source of revenues shouldfurther encourage companies to offer the free-of-charge GPI protectionprogram to customers. The GPI system 1 can be maintained by charging afee according to replacement products sold by the participant companiesor by receiving a fee according to the number of recalled productsidentified, located, or removed from the market or alternativelyaccording to the number of users identified. Yet every company whichoffers replacement products can be charged a fee. The companies can havetheir product information directly reach consumers who need thereplacement product. The embodiment involves partnering with GPI membercompanies for sales of their replacement products and direct to customeractivities with personalized sales. Offer of an alternative product istriggered by the product recalled. For each product recalled analternative replacement product is offered, preferably at a discountrate by the manufacturer of the defective or harmful product. Inaddition, the GPI server 10 can provide via the IECLD 40, besidesalternative products and drugs, reminders about taking medication andreminders for filling or refilling a prescription.

FIGS. 8A to 8C present a schematic view of an exemplary memory, fieldsand record arrangement for carrying out the principles of the invention.FIG. 8A shows the user's personal information database 700 which iskeyed on the username 701, 702 and contains: field A (demographicinformation such as name, address, occupation, date of birth) 710, fieldB (password and other security data) 711, field C (doctor's information)712, field D (laboratory information) 713, field E (pharmacyinformation) 714, field F (insurance information) 715, field G (currentillnesses) 716, field H (range of normal biological variables) 717,field I (timely monitoring period) 718, field J (hazard with untimelymonitoring) 719, and field K (inform doctor of abnormal value) 720. Theproduct database 730 is keyed on the product identifier (UPI) 731, 732and contains field username (UN) 733. The user's product usage database740 is keyed on UN 741 preferably described as a full Internet address742, 743, 744, 745. For each UN record there are associated one orvarious UPIs 746, 747, 748, 749. The databases 700, 730, 740 areprimarily updated by the user. The disease association database 750includes an expert system with fields biological variables (BV) 751 andindicated diseases (ID) 752. The BV field 751 contains the status of thebiological variable such as the abnormal values for each biologicalvariable 753, 754, 755, 756, 757, with the disease indicated by theabnormal values contained in the ID field 752.

FIG. 8B shows the product information database 760 which is keyed on theproduct identifier (UPI) 761 (as example 762, 769) and contains fields(GI) general information 763 (description of the product, precautions,how to use, warnings, and in case of drugs, also includes theindications and usage, effects, side-effects, adverse reactions, and insome cases dosage and administration, chemical and clinicalinformation), contraindication (CI) field 764 with its associated hazarddegree (HD) field (Recall, Harmful 1 to 5, Beneficial) 765, doctorappointment required field (DARq) 766, and laboratory appointmentrequired field (LARq) 767. The product information database 760 alsocontains the product interaction (PI) field 768 with its associatedproduct identifier field 830 with, for example, interaction of productidentifier 762 with drug M (product identifier 831) and interaction withfood F (product identifier 832). The PI field 768 also contains itsassociated warning message (WM) field 833, HD field 834, DARq field 835and LARq field 836.

As an example, product identifier 762 is aspirin with the aspirin UPI0031 also stored under numerous UN 741 in user's product usage database740, and product (drug M) 831 is warfarin. Drug M 831 warfarin interactswith aspirin 762. The WM 833 is then “aspirin-warfarin increases risk ofbleeding”, the HD 834 is H4, DARq 835 is “yes”, and LARq is “yes” withcoagulation profile required.

The product information database 760 is primarily updated by themanufacturer of the product. The biological variables database 770 iskeyed on the UN 771 as example addresses 772,773 and contains parameterfield (PAR) 774 (biological status evaluated), value (VA) field 775(values for each biological function), and time/date (DA) field (timeand date at which biological function was transferred going from mostrecent to least recent). Sample parameters within PAR 774 include eyepressure 777, glucose 778, liver enzymes 779, triglycerides 780, andweight 781. The biological variables database 770 is updated primarilyby the user.

FIG. 8C shows the alert database 790 which is keyed on the productidentifier (UPI) 791, as example 792, 793, and contains the alertinformation (AI) field 794 and its associated HD 795 as well as alertlevel (AL) field 796. The alert information field 794 contains theinformation acquired from the RIS 60 such as FDA 130. For example, theUPI for Redux® contains in the AI field 794 “patients taking this drugare at risk of damaging the valves of the heart which may cause heartfailure and infection of the heart valves which can be fatal”, and itsassociated HD 795 is H4. The AL 796 is R for recall.

The alert database also contains the CI field 797, HD field 798, DARqfield 799 and LARq field 800 in a similar structure as the productinformation database 760 but with the information being related torecall and harmful/beneficial effects and derived primarily fromgovernment and regulatory RIS 60. The same UPI 0031 is present in theproduct information database 760 and alert database 790, but forinstance CI 764 relates to established contraindications and CI 797relates to contraindications newly identified by regulatory agencies.Alert database 790 also contains PI field 801, with its associatedproduct identifier field 805 with, for example, interaction of productidentifier 792 with drug A (product identifier 810), interaction withdrug B (product identifier 811), interaction with food E (productidentifier 812), and interaction with cosmetic X (product identifier813). The PI field 801 also contains its associated warning message (WM)field 806, HD field 807, DARq field 808 and LARq field 809. The same UPI0031 in the product information database 760 is known to interact withdrug M 831 and food F 832 which are established interactions. On theother hand the same UPI 0031 in the alert database 790 interacts withnew products such as drug A 810, drug B 811, food E 812 and cosmetic X813. These are new interactions found during post-market surveillancewhich were acquired over time during years of use of the product. As newinformation from the RIS 60 is acquired, the alert database 790 adds thenew interactions found and transfers information to the user of theproduct, but only to the specific user of the product, therebyoptimizing the transfer and use of information. The alert database 790also contains the fields name of medications (name M) 802, isprescription required (Is Rx Rq) 803, and instructions and directions,including alternative drugs or products (Message Dir) 804 which containsthe information needed by the user in regard to drugs and instructionsnecessary to treat or prevent the harmful effect of the product.

FIG. 9 is an illustration of an exemplary embodiment of the centralserver 10 in accordance with FIGS. 8A through 8C and the associatedalgorithmic logic flow diagrams in accordance with the principles of thecurrent invention. The depicted central server 10 includes data storagedevice 699 with a product database 730, product information database760, user's product usage database 740, alert database 790, biologicalvariables database 770, disease association database 750 and user'spersonal information database 700. The central server 10 also includes aCPU 856, operating system 860, RAM 858, ROM 857, clock 859, and modulesto carry out and configure the applications such as generaladministration module and database management module 850, search module851, encryption/decryption module 852, e-mail module 853, time/datemodule 854, transmission module 855, as well as communications interface861.

The product information database 760 is primarily the result ofinformation derived from a certain type of RIS 60, namely themanufacturer of the product 148. The alert database 790 is primarily theresult of information derived from another RIS 60, namely governmentagencies such as the FDA 130 and the like.

An exemplary GPI server 10 infrastructure includes: (1) Highavailability server (HA), Rad 5, disk clustering, disk mirroring, anddisk shadowing, (2) Redundant gigabit network (OC3), (3) SAN (storagearea network) with a Tivoli system, (4) web server (5) Demilitarizedzone (DMZ) with double firewall (6) Server hardware such as Compaq ES40, or alternatively the IBM RISK 2000, with multiple processors andUNIX operating system, (7) Database Management Product such as Oracle 8or higher, (8) UPS (uninterruptable power supply), (9) multiple modemlines with autodialers, (10) fax modem, (11) IVRs.

FIGS. 10 through 20 show algorithmic logic flow diagrams to carry outthe operation in the most efficient way while optimizing time spentonline, according to the principles of the invention. It is to beunderstood that changing the amount of time online and/or continuouscoupling between local computer (e.g., IECLD 40, computer system 30, orthe like) and the server 10 and other connections/processing variationsare considered alternative embodiments, but do not optimize the use ofcommunications medium.

In reference to FIG. 10 there is shown a flow chart of an exemplary dataacquisition procedure in the current invention by the portable IECLD 40,and with options for subsequent transmission of data. The illustrativesteps depicted refer to a preferred embodiment where the user acquiresoptically encoded unique product identifiers using a bar code readermounted in a portable hand-held programmable microprocessor such as forinstance the IECLD 40. It is intended that other manual or automaticmeans of acquiring the unique product identifier can be used, such asmanual keyboard entry, verbal entry, RF, optical, satellite, cable,telephone lines as well as any other wired or wireless means. Telephonelines, for instance, can be used for acquisition of UPIs at thepoint-of-sale. It is easily appreciated by one skilled in the art thatthe user can enter and transfer unique product identifiers usingstandard computer systems 30 previously described and thus bypass theIECLD 40. The GPI system 1 can also work using different links such ason-line connection, off-line connection, direct link, and the like, andthe few following examples will better demonstrate the options. Forinstance, the user can transfer the UPI and remain connected with theGPI server 10, receiving immediate product recall/information feedback,or the user can send the UPI and biological variables, and thendisconnect from the GPI server 10. As another example, the user canremain online but if there is no information in the GPI server 10 forthe UPI transmitted by the user, then the user disconnects and in thislater case as soon as the information on the UPI is transferred to theGPI server 10 by the RIS 60, the recall/product information istransmitted to the user who may be connected or disconnected to/from theGPI server 10. Alternatively, the user may only receive information byconventional e-mail from the GPI server 10 after transmitting biologicalvariables and/or UPIs, and so on. The e-mail Alert Message can connectthe user with the GPI website for further information on the recalledproduct.

In the exemplary embodiment of FIG. 10, the user activates the IECLD 40and the first step during the process is to prompt the username at step900 and password at step 910. The user then enters his username andpassword in the standard manner. The password is stored in the portableunit 40 and compared with a corresponding stored password 920,preferably stored within another memory unit in the portable unitmicroprocessor. If there is a positive match between the enteredpassword and the stored password at step 930, then step 952 proceeds tothe next operation. If there is no positive match an alarm will sound,step 940, informing the user that the password is invalid, step 950. Itis understood that a variety of other means to ensure security andpassword systems are described in the prior art and can be used in theinvention.

Once the password is validated, a Select Function screen is displayed,step 952, allowing the user to select the desired function. Thesefunctions include enter biometric data 954, acquire key 956, enterproduct identifier 958, remove product identifier 960, and enterbiological variable 962.

When the enter product identifier function is selected, step 958, theuser can select a product type at step 1000, shown in FIG. 11A. Uponselection of a product type, the scanner is enabled at step 1010 and theuser is prompted to scan the bar code at step 1020. Step 1030 determinesif the product identifier is the last one to be scanned. If it is notthe last product identifier, the bar code for the product identifier isscanned at step 1040. The next operation, step 1050, determines if thebar code is valid. If it is valid, processing continues to step 1070 andthe scanned unique bar code for the product is stored in the portableunit memory. If the bar code is not valid, the user is prompted torescan at step 1060. Next, the user is prompted to scan another bar coderelated to a new product identifier and the process repeats until thelast product identifier is scanned. After the last product identifier isscanned, step 1030, the next operation connects the portable unit 40with the central server 10 at step 1080 and username and password aretransferred at step 1090. Although the above description refers to theacquisition of UPIs using the portable unit 40, it is understood thatsimilar processing can be used at the point-of-sale when using the GPIcards 39A for acquisition and transfer of UPIs to CCC 80.

Referring now to FIG. 11B, upon valid verification and authentication,the encrypted product identifier is transferred to the central server 10at step 1100. Then step 1110 searches product information database 760for product identifiers transferred. Next, step 1120 checks the productinformation database 760 to determine whether there is any data onproduct identifier transferred. If not, then a list of productidentifiers without data is created, step 1130, and a message “No data.Rescan in 24 hours” is transferred to the portable unit 40, step 1150.The list is then used to search for the data related to the productidentifiers transferred by users. If there is product identifier data,step 1120, such data in any of the fields 763, 764, 765, 766, 767, 768is retrieved, step 1140. Next the product information data about productidentifier is transferred to portable unit 40, step 1160. The data aboutproduct identifier is then stored in the portable unit memory anddisplayed, step 1170.

In FIG. 11C, step 1180 determines whether there is any data on theproduct identifier transferred which is present in the alert database790. If yes, the alert level 796 on product identifier is retrieved,step 1190; otherwise the process proceeds to step 1280 and disconnectfrom central server 10. Following retrieval of the alert level, step1200 determines if the alert level 796 is a recall code. If yes, then analarm sounds and an alert light is activated in portable unit 40 at step1230. If the alert level is not a recall code, step 1210 determines ifthe alert level is a hazard degree 5 (life-threatening). If yes, theprocess proceeds to step 1230; if no, processing continues to step 1220to determine whether the alert level is a harmful code. If yes,appropriate audio and visible signs are activated in the portable unit40 at step 1230. If the alert level is not a harmful code, alertinformation 794 on product identifier is transferred, step 1240, toportable unit 40. Then alert level 796 and alert information 794 withhazard degree 795 about product identifier are stored in the portableunit memory and displayed, step 1260. At step 1280 the central server 10is disconnected from portable unit 40. Although in the above descriptionthe product information is displayed on the portable unit 40, it isunderstood that the information can be displayed on other devices suchas the point-of-sale terminals, screen of telephones, watches, and thelike.

FIG. 11D shows operation continuing to step 1300 to create an alertmessage and highest hazard degree=0. Next, “doctor's appointmentrequired” and “lab appointment required” flags are created andinitialized to NO, step 1310. Then step 1320 determines whether for eachproduct identifier in step 1110 there is product identifier in theuser's product usage record in the user's product usage database 740. Ifnot, then the product identifier transferred is added to user's productusage record at step 1330 and the username is added to product record inproduct database, step 1340. If there is product identifier in user'sproduct usage record, operation proceeds to determine, step 1350,whether there is product identifier in product information database 760.If there is, then step 1360 retrieves product general information 763from product information database 760 and step 1370 attaches productgeneral information 763 to alert message, as shown in FIG. 11E. If thereis no product identifier, or following attachment of the product generalinformation to the alert message, the process proceeds to the step 1380to determine if for each product identifier in step 1110 there arecontraindications 764 listed in its product information record inproduct information database 760. If yes, contraindications 764 areretrieved, step 1390, from product information record in productinformation database 760; otherwise the process proceeds to step 1550.

Once contraindications have been retrieved, step 1400 determines for theusername in the user's personal information record whether there arecurrent illnesses 716 listed. If yes, then current illnesses 716 areretrieved, step 1420. If not, the process proceeds to step 1480. Oncecurrent illnesses have been retrieved, step 1420 then determines whetherany of the current illnesses 716 match contraindications 764. If yes,step 1430 attaches to alert message that product is contra-indicated foruser's current illnesses 716, as shown in FIG 11F. Processing thencontinues to step 1440, in which if “doctor's appointment required” 766of contraindication 764 is “Yes” then “doctor's appointment required”equals Yes. Next, step 1450, if “laboratory appointment required” 767equals “Yes” then “lab appointment required” equals Yes. At step 1460,if hazard degree 765 of contraindication 764 in product informationdatabase 760 is greater than highest hazard degree, then highest hazarddegree equals hazard degree of contraindication.

Referring now to FIG. 11G, step 1480 determines whether for the username771 in the biological variables database 770 there are biologicalvariables parameters 774 listed. If yes, step 1490 retrieves biologicalvariables parameters 774, values 775 and time/date 776 from biologicalvariables database 770. If no, the process proceeds to step 1550.

Once the biological data has been retrieved, identified diseases aredetermined, step 1500, based on user's biological variables parameters774 and values 775 using disease association database 750. Step 1510then determines if any of the identified diseases 752 matchcontraindication 764. If no, the process proceeds to step 1550. If yes,step 1520 attaches to alert message that product is contraindicated foridentified diseases 752 indicated according to the user's biologicalvariable values. Next, step 1530, steps 1440 and 1450 are repeated todetermine if doctor's appointment or lab appointment is requiredaccording to contraindication 764 information in product informationdatabase 760. Then at step 1540, if hazard degree of contraindication inproduct information database is greater than highest hazard degree thenhighest hazard degree, equals highest hazard degree of contraindication.

Referring now to FIG. 11H, step 1550 repeats the steps of 1380 to 1540using alert database 790 instead of product information database 760.The routine allows the identification of the hazard degree, need fordoctor or lab appointment according to the contraindication in bothdatabases, product information database 760 and alert database 790. Forinstance, in case the user is utilizing a product and then later changesoccur in the user's health status according to the user's biologicalvariables, the GPI system 1 identifies the contraindication with itshazard degree and the need for doctor or laboratory evaluation accordingto the information in the product information database 760. In case theuse of the product is contraindicated according to the health status ofthe user, the GPI system 1 informs the user about the hazard and theaction that the user should take.

The method continues with step 1560 which, determines whether, for eachproduct identifier in step 1110, there are product interactions listedin product interaction field 768 in product information database 760. Ifyes, step 1570 retrieves product identifiers in product interactionfield 768 in product information database 760 based on productidentifiers at step 1560, identifying thus known product interactionsconcerning the products which were transferred. If not, processingcontinues with step 1660.

After product identifiers in product interaction filed have beenretrieved, step 1580 retrieves product identifiers for the user from theuser's product usage database 740 thus identifying the productscurrently being used. Step 1590 then determines whether any productidentifier from step 1570 matches product identifier from step 1580 inorder to determine product-product interaction or, more precisely,interaction between products transferred and products being used. Ifthere is no match, now referring to FIGS. 11I and 11J, processingproceeds to step 1660. For example as described above, the heart rateand rhythm of a patient who has an implanted pacemaker is beingmonitored and the data is sent to the GPI server 10 via the Internet. Inthis case the HMD 50 consists of a heart monitoring device used at homewith continuous 24 hour monitoring. If momentarily the heart rate slowsdown, the information is identified as bradicardia and if the user alsohas in his/her database a product identifier for verapamil andfurthermore a product identifier for grapefruit juice, then the systemidentifies the product as interacting with verapamil as previouslydescribed, in which grapefruit juice could be potentially increasing theeffect of verapamil which in consequence increases its heart blockingproperties which ultimately is responsible for the slow heart ratetransferred. In this case a simple change in the diet and/or other drugcan fix the problem. Using the prior art, most likely the doctor mayhave a tendency to consider a malfunctioning pacemaker or interaction ofthe pacemaker with verapamil and then great effort, time and expense isused in checking and fixing the pacemaker and/or changing the drugregimen, not knowing that potentially a small change in diet could havefixed the problem.

Referring again to FIG 11I, the next step 1600 retrieves productinteraction warning message 833 from product interaction field 768 inproduct information database 760 based on product identifier from step1560 and product identifier from match at step 1590, thus preciselyinforming the user about the potential injury or illness caused by theconcomitant use of products acquired or stored for the user. Then, step1610, the interaction warning message 833 is attached to alert message.Next, at step 1620 if “doctor's appointment required” 835 of interactionwarning message 833 equals “yes” then “doctor's appointment required”equals “yes”. At step 1630 if “laboratory appointment required” 836 ofinteraction warning message 833 equals “yes” then “laboratoryappointment required” equals “yes”. Next, at step 1640 if hazard degree834 of interaction warning message 833 is greater than highest hazarddegree, then highest hazard degree equals hazard degree of interactionwarning message.

Referring now to FIG. 11J, step 1660 then repeats the steps of 1560 to1640 using alert database 790 instead of product information database760. According to the exemplary embodiment, the product informationdatabase 760 provided information derived from the manufacturerindicating that product UPI 0031, for instance a pain killer (aspirin),interacts with drug M 831 and food F 832 while the alert database 790provided information derived from post-market surveillance by the FDA130 indicating new interactions that were later discovered after thedrug had been on the market; the newly discovered interactions includedrug A 810, drug B 811, food E 812 and cosmetic X 813. The user is theninformed about potential interactions involving established informationas well as new information acquired during post-market surveillance, forexample. The processing then continues to address another important areaof recalled products and harmful products according to informationprovided by the RIS 60.

Step 1670 determines whether, for each product identifier in step 1110,there is a record in alert database 790. If not, processing proceeds tostep 1710. Otherwise, the highest hazard degree value is determined,step 1680, based on product identifiers at step 1670 using hazard degree795 in alert information field 794 in alert database 790. Then if thehighest value is greater than the highest hazard degree, then highesthazard degree equals hazard degree, step 1690, thus informing of theuser the highest hazard degree related to a recall and the informationrelated to the recall. Step 1700 then retrieves product alertinformation for product identifier from alert information field 794 inalert database 790.

Upon that, and referring now to FIG. 11K, processing at step 1710determines if highest hazard degree equals code 4. If yes, then step1735 determines if the user is online and, if so, an instant message issent to the user, step 1740. If the highest hazard degree is not equalto code 4, step 1720 determines if highest hazard degree equals code 5.If not, the process proceeds to step 1780; otherwise at step 1725 EMS orambulance service 72 is called and step 1730 determines if the call iscompleted. If yes, processing continues with step 1735 to determine ifthe user is online and, if the user is online, an instant message issent, step 1740. If the call is not completed, then step 1770 connectswith a 24-hour nurse or auto dial 911 if in the USA. After an instantmessage is sent, product alert information 794 is attached to alertmessage, step 1780.

If the user is not online, in order for critical and life-savinginformation to reach the user, step 1745 autodials the user. Step 1750then determines if the call is completed. If yes, step 1755 instructsthe user; otherwise an alternate number is dialed, step 1760, accordingto information from the user's personal information database 700. Next,step 1765 determines if the call is completed for alternate number. Ifyes, processing proceeds with step 1755 and the user is instructed;otherwise step 1770 connects with a 24-hour nurse and then proceeds tostep 1780. After instructing the user, processing continues, step 1780,with the product alert information 794 being attached to alert message.

Referring now to FIG. 11L, step 1790 determines whether there is doctorinformation, 712 or laboratory information 713 or pharmacy information714 in the user's personal information database 700. If yes, step 1800retrieves user's personal information; otherwise the operation proceedsto step 1960. Once the user's personal information has been retrieved,“doctor's appointment required” flag is tested at step 1810. If the flagis set, step 1820 connects with doctor and an appointment is scheduled,step 1830. If the flag is not set, the process determines, step 1840,whether the “laboratory appointment required” flag is set. If yes, step1850 connects with laboratory and an appointment is scheduled, step1860. If the laboratory flag is not set, step 1870 determines ifmedications are required 802 according to alert database 790. If not,processing proceeds to step 1920. If medications are required, step 1880determines if a prescription is required 803. If yes, doctor iscontacted and prescription is requested, step 1900, and the pharmacy iscontacted, step 1890. If prescription is not required, then pharmacy iscontacted at step 1890 with medication requested at step 1910.

Step 1920 determines if insurance approval 715 is needed based on theuser's personal information record. If not, processing continues withstep 1950. If approval is required, step 1930 sends information to theinsurance company and requests approval according to insuranceinformation 715 in the user's personal information database 700. Then iffor example a drug as Dexfenfluramine (Redux®) as previously describedwas used and since the recommendations by the FDA include heartevaluation by a doctor, then the user of the UPI Dexfenfluramine(Redux®) is automatically scheduled for an appointment with a suitabledoctor in the user's domicile area. Then if for example a drug asDexfenfluramine (Redux®) was used and since the recommendations by theFDA include laboratory evaluation with an echocardiogram, then the userof the UPI Dexfenfluramine (Redux®) is automatically scheduled for anechocardiogram in a suitable laboratory or medical institution in theuser's domicile area according to the user's record in the user'spersonal information database 700. After the laboratory tests areperformed, the results of the laboratory tests are electronically sentto the GPI server 10 and the data is stored in the biological variablesdatabase 770 for the user who underwent the laboratory evaluation. If aprescription is needed, as recommended by, for instance, an RIS 60 suchas FDA 130, then the doctor is contacted and a prescription sent to apharmacy in the user's domicile area. If there is need for insuranceapproval according to the user's record, then the approval code isacquired, step 1940, and transferred to the various health careproviders. Next, step 1950 generates a message with doctor appointmentand laboratory appointment, approval code from insurance, name ofmedications 802 and directions, alternative medications, andinstructions 804 and attaches this information to alert message. Next,step 1960 sends alert message to user and doctor, and processing ends.

Returning to FIG. 10, the transfer of user's biological variable tocentral server 10 occurs once the password is validated. Upon that, aSelect Function screen is displayed at step 952, allowing the user toselect the desired function.

After selecting enter biological variable 962, processing continues withstep 965. Biological variables can be acquired in various ways aspreviously described. After acquisition of the biological variable, step970 determines if it is the last biological variable. If yes, thenconnection with central server 10 is established at step 985. If it isnot the last variable, processing continues with selection of abiological variable, step 975, and entry of biological variable at step980. Next, step 965 acquires biological variable and, if it is the lastbiological variable, connects with central server 10 at step 985.

Upon that, and now referring to FIG. 12A, step 2000 transfers parameters774 (for example: eye pressure, blood pressure, heart rhythm, bloodanalytes such as glucose and cholesterol, and the like) and values 775of biological variables to central server 10. If continuous heart rhythmor continuous eye pressure is being transferred, in an alternativeembodiment, the central server 10 for continuous mode receives theinformation and is set up to send an alert message according to specificcriteria such as peak in eye pressure above 30 or heart rate faster than100 or slower than 50 and the like. In the current embodiment, afterparameters 774 and values 775 are transferred, the portable unit 40disconnects from the central server 10 at step 2010. Next, step 2020creates an alert message. Step 2030 then retrieves parameters 774 andvalues 775 for the biological variables for username 771 from biologicalvariables database 770. Next, step 2040 determines if the transferredbiological variable parameter 774 is in biological variable record foruser in biological variables database 770. If not, step 2050 adds thebiological variable parameter for user. If the variable is in therecord, processing proceeds to step 2060 and adds time/date stamp tofield 776. Next biological variables database is updated to reflect thenew data transferred, step 2070, and the new values 775 transferred areattached to alert message, step 2080.

Referring now to FIG. 12B, step 2090 retrieves from user's personalinformation database 700 the normal range of biological variables 717for the user, such that the information is precisely crafted accordingto the individual health status and needs of each individual user. Step2100 then determines if transferred biological variables are within thenormal range. If yes, step 2110 attaches a message indicating thatbiological variable values are normal to the alert message and proceedsto step 2370.

If the values are not in the normal range, the timely monitoring period718 is retrieved, step 2120, from user's personal information database700. Next, step 2130 retrieves from biological variable database 770 thetime/date 776 the biological variable was last transferred. Then, step2140 determines if today's date minus date of last transferredbiological variable is less than timely monitoring period. If yes, step2150 attaches a message indicating the value abnormal but timelymonitored to the alert message, and then continues to step 2260. If thedifference is greater than the timely period, step 2160 attaches a userinstruction on timely monitoring to the alert message.

Now referring to FIG. 12C, step 2170 retrieves from user's personalinformation database 700 hazard associated with untimely transmission719 and attaches, step 2180, hazard to alert message. Step 2190 thenretrieves from user personal information database 700 the messageindicating “inform doctor of abnormal value untimely transmitted” 720.Then processing proceeds to test “inform doctor of abnormal valueuntimely transmitted”, step 2200. If doctor is not to be informed, thenoperation proceeds to step 2260. If doctor is to be informed, the doctoris contacted, step 2210, and priority appointment scheduled, step 2220.This previous embodiment relates to the timely intervention andappointments scheduling according to the transmission of biologicalvariables and products being used. Patients sometimes come to theirdoctor at a critical stage of their medical condition in which sometimesirreversible damage or life-threatening complications have alreadyoccurred. It is very difficult to evaluate with certainty when anappointment is needed for a certain patient or certain condition.Sometimes if the patient had come just a few days earlier, a life couldhave been saved or irreversible and costly complications avoided. Forinstance patients with history of renal failure or heart failure need avery strict control of their body weight to avoid potentially fatalcomplications such as acute heart failure and/or pulmonary edema.Patients may call the doctor's office for an appointment, but most ofthe time if they do not have any clearly warning symptoms, theappointment is scheduled according to the openings in the doctor'sschedule or according to a pre-set time period for instance every 4months. Unfortunately in either case as the appointment is scheduledrandomly, when the patient comes to the doctor's office complicationscould already have occurred. According to an exemplary embodiment anelectronic scale or any other medical monitoring device transfers theinformation about the patient's weight which is evaluated against valueswhich are considered safe for the patient. If the monitored weight isnot within normal limits for the patient and timely transferred, apriority appointment can be scheduled before serious complicationsoccur.

Next, processing continues to evaluate the need for insurance approval.Referring now to FIG. 12D, step 2230 determines if insurance approval isneeded according to record 715. If yes, step 2235 sends information toinsurance company and requests approval. Next the approval code is sentto health care provider for the user, step 2240. If approval is notneeded, step 2250 attaches priority appointment and approval code toalert message. Next, step 2260 determines if transferred biologicalvariable values are associated with disease 752 in the diseaseassociation database 750. If not, step 2280 attaches to alert message“abnormal value for biological variable transferred but no diseaseindicated” and then proceeds to step 2370. If transferred values areassociated with a disease, then step 2270 retrieves disease 752associated with transferred biological variable values 751. Then, step2290 attaches disease message 751, 752 to alert message.

Now referring to FIG. 12E, step 2300 retrieves the user's productidentifiers 749 from the user's product usage record in the user'sproduct usage database 740. At step 2310, contraindications 764 fromproduct information database 760 are retrieved for product identifiersat step 2300. Next, step 2320 determines whether any disease 752associated with biological variables transferred matchescontraindication 764 in product information database 760 associated withproduct identifiers 749 for the user in the user's product usage record.If yes, then step 2330 attaches to alert message “contraindicationassociated with product identifier in the user's product usage record”,and “consult your doctor”. Processing thus precisely determinesinteraction between unique products used by each individual user andhealth status of each individual user. Next, step 2350 contacts doctorand informs about contraindication. This message to the doctor allowsthe practitioner to evaluate the interaction between a drug prescribedand a change in the health status of the patient who is now at risk ofharm by using the drug. If there are no diseases associated with thetransferred variable, then step 2340 attaches to alert message “nocontraindication found between product identifiers and biologicalvariables”. Next, processing addresses information related tocontraindication received from RIS 60 such as government agencies, withthe information stored in alert database 790. In accordance, step 2360repeats the steps of 2300 to 2350 for the alert database 790 instead ofproduct information database 760. Next, an alert message is sent, step2370, with the information acquired, to the user and operation ends.

FIGS. 13A and 13B depict the flow diagram concerning acquisition of datafrom the RIS 60. In this exemplary embodiment, a government remotecomputer transfers information to alert database 790. At step 2400 theremote computer sends message to central server 10 that updatedinformation is available. Next, after appropriate identification andauthentication, central server 10 establishes connection with remotecomputer, step 2410. At step 2420, the remote computer 60 transfersproduct identifiers with associated “new warning information,” which canbe a recall warning, harmful warning levels 1 to 5, or a beneficialnotice according to the new data acquired by the government agency. Step2430 then stores product identifiers and “new warning information” inalert database 790. Next step 2440 disconnects remote computer fromcentral server 10. Step 2450 then creates alert message. Step 2460 thendetermines if product identifiers transferred are in the productdatabase 730. If not, the operation ends. If product identifier is inproduct database, step 2470 retrieves usernames associated with productidentifiers. Next step 2480 attaches “new warning information” to alertmessage. Step 2490 then sends alert message to all usernames identifiedat step 2470, and operation ends.

Referring now to FIGS. 14A and 14B, a similar processing as above isused, but now using the manufacturer 148 as remote computer updatingproduct information in the product information database 760. Inaccordance, at step 2500 remote manufacturer computer 148 sends messageto central server 10 that updated information is available. Next, atstep 2510 central server 10 establishes connection with remotemanufacturer computer 148. At step 2520 remote manufacturer computer 148then sends product identifiers with associated “new productinformation”. Next, step 2530 stores product identifiers and “newproduct information” in product information database 760. Next, step2540 disconnects central server 10 from remote computer 148 and step2550 creates alert message. Next, step 2560 determines if productidentifier is in the product database 730. If not, the operation ends.If the product identifier is in the database 730, step 2570 retrievesusernames associated with product identifiers. Then step 2580 attaches“new product information” to alert message and step 2590 sends alertmessage to all usernames identified at step 2570, and operation ends.

For every product identifier transferred by a user, the central server10 provides the information related to the product. When the centralserver 10 receives for the first time a certain product identifier froma user, the central server 10 may not have data on the productidentifier transferred and will ask the user to rescan the product in 24hours. The central server 10 then, in the next 24 hours, searches theRIS 60 for the information related to the product identifier. Inaccordance, and now referring to FIGS. 15A and 15B, at step 2600 centralserver 10 initiates connection with a remote computer 60, which can be agovernment agency, the manufacturer, a medical institution, a researchfacility, and the like. Next, step 2610 connects the central server 10to the remote computer 60. At step 2620 the central server 10 accessesthe remote computer database. Step 2630 then determines whether there isa primary key in the remote computer database. If not, the processproceeds with step 2670 and disconnection from the remote computer 60.If there is a primary key, the information associated with the primarykey is retrieved, step 2640. Step 2650 then stores the retrievedinformation in the database of central server 10. Next, step 2660generates a list of updated information on the primary keys anddisconnects from remote computer at step 2670. Step 2680 then determinesif the primary key is product identifier. If not, the process proceedswith step 2720 to determine if the primary key is a username and, ifnot, the operation ends. If the primary key is a username, for thatusername step 2730 performs step 2000 through 2370, and the operationends.

If primary key is a product identifier, then step 2690 determines ifproduct identifier is in product database 730. If not, the operationends. If the product identifier is in the product database, step 2700retrieves usernames associated with product identifiers. Next, step2710, for usernames retrieved in step 2700, steps 1300 through 1960 areperformed for product identifier, and processing ends.

FIG. 16 depicts an exemplary function related to the use of biometricdata and the visual or audio identification of products primarily forvisual and hearing impaired users. In accordance therewith, entry ofbiometric data is the function selected (step 954 of FIG. 10). The firstprocessing step, step 2800, is to input biometric data (for instance:iris scanning or finger print. At step 2810 the biometric data enteredis then compared with the stored biometric data 2805. If there is apositive match between the entered biometric data and the storedbiometric data, then step 2830 enables key pad. If there is no positivematch, an alarm will sound (2815) and the display will inform the userthat the biometric data is invalid, step 2820.

Once the biometric data is validated and the keypad enabled, step 2830,the user selects product type, step 2840. Step 2850 enables scanner andstep 2860 prompts user to scan. Next, the user scans barcode, step 2870,and stores bar code in the memory of the portable unit 40, step 2880.Next, step 2890 determines if name is available for bar code scanned. Ifnot, operation proceeds to step 2910 and the bar code number isdisplayed. If the name is available, the name of the product ispresented using visual and audio means, step 2900, and the processcontinues with step 2900 to display bar code number, and the operationends.

FIG. 17A shows an exemplary function related to the acquisition of a keyor password by the user in order to access the database or chat roomrelated to the product being used or illness indicated by the user'sbiological variables and/or injury/illness caused by a product,including chat rooms related to support groups for a certain type ofillness/injury. The user can acquire a key for any condition or productof interest. In accordance, acquire key 956 (FIG. 10) is the functionselected.

According to the function, in step 3000 the user transfers productidentifier to central server 10 according to the principles of theinvention. Then central server 10 generates a product key at step 3010.Step 3020 then transfers the key to the user and step 3030 stores thekey in user's computer. At step. 3040, if user is online then user'scomputer accesses product chat room or database, and the operation ends.Alternatively, the user can acquire the key and later access chat room.Accordingly, and now referring to FIG. 17B, at step 3050 user's computerenters the key and then accesses chat room or database at step 3055 andthe operation ends.

When user deletes a product identifier (see, for example, step 4120 ofFIG. 19B), then the central server 10 voids the key related to theproduct identifier. In accordance, and referring to FIG. 17C, anytimethe user removes or deletes a product identifier, step 3060, the centralserver 10 voids that key for the product identifier, step 3065, and theoperation ends. Alternatively, the GPI server 10 can automaticallytransmit a key to all of the users of the product. The key is necessaryto enter a room, for example, an electronic room, board or window foundon commercial on-line providers. Moreover, the users of the samerecalled product who sustained harm caused by the product cancommunicate with each other, thus creating a support system for thevictims and allowing the victims to share experiences, tips ontreatment, how to personally control certain symptoms, and the like.

FIG. 18A shows an exemplary embodiment related to the acquisition of akey by a medical provider or authorized provider. The doctor, forexample, can then access the biological variables transferred to acentral database. In this embodiment the user, who may be a patient withglaucoma or diabetes, transfers his/her biological variables to acentral database. The doctor then at his/her discretion can access thedatabase and check the biological variables parameters and values forany of the doctor's patients. In accordance, operation starts and atstep 3070 the doctor transfers the username and password. The passwordis needed so that only the doctor treating the patient or authorizedprovider can access the biological variable database for the patient.After proper authentication and identification according to conventionalmeans is secured, at step 3080 the central server 10 generates the keyfor biological variables database for the username transferred. Next, atstep 3090 central server 10 transfers key to doctors computer forbiological variable record for username. At step 3100 the doctor'scomputer stores the key and accesses biological variables record for theuser in biological variables database, step 3110, and the operationends.

Although biological variables can be electronically transferred to aremote computer such as the doctor's computer, this can be considered asan alternative embodiment since it can flood the doctor's remotecomputer with vast amounts of data. According to the preferredembodiment, data remains stored in a central database that can be easilyaccessed by any person at any place in the world as long as the personis an authorized user. The doctor can also acquire the key and lateraccess the patient's biological variable record or chat room.Accordingly, and referring to FIG. 18B, at step 3115 the doctor'scomputer enters the key and then accesses biological variables record orchat room, step 3120, and the operation ends. FIG 18C shows a summary ofprocessing related to voiding a key. When the doctor deletes username orpreferably the user removes doctor's name 712 from personal informationdatabase at step 3125, then the central server 10 voids the doctor's keyrelated to the username biological variable record, step 3130, and theoperation ends. Alternatively, the GPI server 10 can transmit a key tothe doctor who is responsible for the medical care of a certain user.

FIGS. 19A and 19B depicts an exemplary embodiment related to removal ofproduct identifier from the database by the user. In accordance, whenremove product identifier function is selected, step 960 of FIG. 10, theuser can select a product type at step 4000. Upon selection of product,the scanner is enabled at step 4010 and prompts the user to scan the barcode at step 4020. The next step 4030 then determines if the productidentifier is the last one to be scanned. If it is not the last productidentifier, then the bar code for the product identifier is scanned atstep 4040. The next operation, step 4050, determines if the bar code isvalid. If it is valid, processing continues with step 4070 and thescanned unique bar code for the product is stored in the portable unitmemory. If the bar code is not valid, the user is prompted to rescan,step 4060. Next, the user is prompted to scan another bar code relatedto a new product identifier and the process repeats until the lastproduct identifier is scanned.

After the last product identifier is scanned, processing connects theportable unit 40 with the central server 10 at step 4080 and usernameand password are transferred at step 4090. Upon valid verification andauthentication, the encrypted product identifier is transferred to thecentral server 10 at step 4100. Next, step 4110 determines if productidentifier transferred is in user's product usage record for user inuser's product usage database 740. If not, step 4130 sends a message toportable unit 40, “product identifier not in user's record” and thenproceeds to step 4160. If the product identifier is in the user'srecord, step 4120 removes product identifier for user in user's productusage record. Next, step 4140 removes username for product identifierfrom product database. Then step 4150 sends message to portable unit 40“product identifier successfully deleted”. Step 4160 then disconnectsfrom central server 10 and operation ends.

FIG. 20A and 20B shows an exemplary embodiment related to automaticallyremoval of biological variable values by the central server in order toavoid retention of a large amount of old data in the database.Biological variables relate to dynamic changes occurring in the humanbody, thus data that it is more than a year old may not be relevant tothe user's present health status and thus will be automatically deleted.Biological variables acquired either at the doctor's office or at theuser's domicile are automatically deleted if the data is more than ayear old. However, the system will preserve at least one value sincehealthy individuals may go to their doctor only once every two or threeyears while older patients may go the doctor on a routine basis everythree months. The system will preserve at least one value for eachbiological variable parameter transferred which can be used as areference for the medical status of the user.

Accordingly operation starts and at step 5000 the central server 10accesses the biological variables database 770. Then at step 5010username equals the name of the first user in biological variablesdatabase. Next, step 5020 gets first parameter record 774 for username.Then, from parameter record 774, step 5030 gets first value 775 andtime/date 776. Next step 5040 determines if today's time/date minustime/date is greater than one year. If not, operation proceeds to step5080; otherwise, step 5050 determines if value is the last value inparameter record. If yes, step 5055 sends message to user that “mostrecent biological variable value is more than 1 year old” and proceedsto step 5080. If the value is not the last value, then step 5060 removesvalue and time/date from parameter record. Next, from parameter record,step 5070 gets next value and time/date and repeats processing, step5040, to determine if today's time/date minus time/date is greater than1 year. If not, processing proceeds to evaluate another biologicalvariable parameter and step 5080 determines if parameter record is thelast parameter record for the user. If the difference is greater than 1year, the process proceeds to step 5050.

If the record is not the last parameter record, step 5090 gets nextparameter record for username, and processing repeats until all valuesand parameters are evaluated for the username. If the record is thelast, step 5100 determines if username is the last user in biologicalvariables database. If yes, the operation ends; otherwise, at step 5110username equals name of the next user in biological variables database,and at step 5120 go to step 5020 for further processing until biologicalvariables for all users are evaluated.

The system can work on information locally stored, but if theinformation on the unique potentially harmful product transferred by theuser is not located over the GPI server 10, the GPI server 10 can thenconnect the user to the remote site over the Internet 100 which containsthe warning information on the harmful product. It is thus understoodthat alternative embodiments can be implemented with the informationsent to the user concerning a warning or recall related to a productbeing used and/or interaction product-product and product-biologicalvariable comprising also a web URL (Uniform Resource Locators), bulletinboard address, direct connection with a web site, and the like as wellas a voice mail address, phone number, mail address and the like, withall of these sources containing relevant information related to theproduct warning and/or recall and other interactions. Alternatively, theGPI server 10 can electronically connect the user of the product withthe site on the Internet which contains the warning information, such asthe research institution 154, or the manufacturer 148, or the FDA 130,or the CPSC 132, and the like. Information relevant only to the productsassociated with a unique user is transferred back to the user and theuser receives selected information on only the products being utilizedby the user and only on interaction product-biological variablescorresponding to the health status of the single user. It is understoodthat advances in processing and communication mediums will allow theunique product identifiers and biological variables to be automatically,continuously, and instantaneously transferred to the GPI server 10 asthe unique product identifiers and biological variables are acquiredand/or selected by the user with the subsequent automated processing andtransfer of alert information related to the product identifiers andbiological variables back to the user related to the product identifiersand biological variables.

The user's personal information 700 can be expanded to include otherinformation about said user. The user can include credit cardinformation and other commonly used data linked to the user including atrain schedule. For example, the user, Mr. Martin, is on a three monthtrip in Switzerland. The user checks his eye pressure, blood cholesteroland blood sugar using the aforementioned Abreu self-monitoring devicesusing a cell phone as the receiver for the signal from the monitoringdevices. The data is sent to the GPI server 10 which identifiesincreased eye pressure and, considering that the user is usingamiodarone, a harmful interaction causing eye damage is identified. TheGPI server 10 also identifies a newly recalled product (Redux®) which isstored in the user's product usage database 740. A newly recalledchocolate found to have undisclosed amounts of peanuts is alsoidentified. Since the user is allergic to peanuts an alert is generated.While the GPI server 10 had also identified a recalled crib as beingused, the system notes that a successful phone alert was sent. The userhas a doctor's name in Switzerland stored in his personal informationdatabase 700 and an appointment is scheduled. Since the user had hiscredit card information and train schedule stored in the user's personaldatabase 700, the message delivered identifies which train to take toget to the doctor and includes a reserved ticket for the trip.

Although sequencing processing is primarily described, it is understoodthat other processing design known by one skilled in the art can beused. For instance, an object oriented design with parallel processingcan be used. For example step 1710 to 1780 can be an-alert object classapplied to any product identifier or any biological variable.

Alternatively, hand-held IECLD 40 may also be used in an on-line mannerusing conventional communication lines such as telephone lines orelectronic communications medium in which there is a link andtransmission of data to and/or from the IECLD 40 to the GPI server 10computer station. The IECLD 40 has data storage, processing andtransmission capabilities and the on-line communication between theIECLD 40 and the central GPI server 10 can be done digitally using, forinstance, an acoustic coupler. In this alternative embodiment, thecoupling station is located at the doctor's office or at a pharmacywhere the user receives or fills a prescription for the drug, oralternatively can be done by the patient at home. The patient enters aPersonal Identification Number or password manually, which is thencompared with a number stored in the IECLD 40 memory unit. If there is amatch, the new drug can be scanned in using the bar code reader systemand the data sent to the GPI server 10 using conventional communicationlines. If at the time of entering, there is a warning about the drugstored in the IECLD 40, an alarm will sound and stored information willappear on the display. Although it is technically possible for thehand-held device to be updated with information from the GPI database atthe time of the on-line coupling with GPI server 10 computer station,this is not the preferred way since the hand-held device would have tohave very large memory capabilities to be able to store the data on thethousands of drugs and/or products stored in the GPI database. When,however, the IECLD 40 is used in this manner, any time a drug isentered, such as for instance scanning a bar code for that drug, theentered drug would automatically be evaluated against the data stored inthe memory of the portable device. If the drug prescribed is found tohave potentially detrimental effects, an alarm would be activated andthe information on the drug displayed in the display and a flashinglight activated allowing immediate recognition of the potential harmfuleffect before the drug was even used or even purchased. At any time ofcoupling the new data is transferred from the GPI server 10 station tothe portable IECLD 40 and vice-versa.

FIG. 21 illustrates another exemplary embodiment in which the IECLD 40can interface with standard telephone lines using binary data, with thebinary data generated by the IECLD 40 being processed via standardencryption applications using conventional encryption algorithmsavailable from the National Bureau of Standards. The encrypted binarydata is then transmitted and demodulated and decrypted at the receivingunit with the unit being the GPI server 10 computer station, butpreferably in this embodiment the receiving/transferring unit is anotherIECLD 40 device. The GPI system 1 thus allows secured communication notonly between the GPI server 10 computer station, but also between oneIECLD 40 and another suitable IECLD 40. The communication between twoIECLD's 40 would be useful if a patient with one IECLD 200 wants tocommunicate and transmit the data on the drugs being used to a doctorwho also has a IECLD 202, or to an insurance company which has a IECLD204, or to a hospital which also has a IECLD 206, or to a pharmacy whichhas a IECLD 212, or to an ambulance which carries a suitablecorresponding IECLD 208 and need to know precisely what drugs anddevices a patient is using, or to another institution which may not havean IECLD 40 but has some device 210 able to access and decode the databeing transmitted by the patient's IECLD 200, and the like. This allowsthe transmission of data in an accurate, time- and cost-efficient mannerfrom one IECLD 200 to a receiving point in need of that data. For thetransmission of data between two IECLD 40, the IECLD 40 #1 is used in abarter way and IECLD 40 #2 is programmed to accept data from anothercorresponding IECLD 40, such as IECLD 40 #1, and the data is thenelectronically transferred directly between the two IECLD 40s. Theresponding unit such as the ambulance which carries a IECLD #2 208, maythen automatically and electronically receive the data from thepatient's IECLD #1 200 including the biological variables measured athome by the patient such as blood pressure, eye pressure, blood glucose,temperature etc, as well as the information on the products used anddrugs and medical devices used. The ambulance IECLD 208 can then sendthe information on the condition of the patient and treatment beingadministered back to the patient's IECLD 200 for storage, and also to areceiving unit at a hospital 206 and at the doctor's office 202 whichthen will have all of the information on previous drugs and devicespreviously being used by the patient as well as biological variablesmeasured at home plus the new information on treatment that wasadministered on the way to the hospital in the ambulance. For a completeand reliable information system to be implemented, in this embodiment itis preferred that the patient carry with him some type of identificationinforming that he/she has a IECLD 200 and how to contact or access thepatient's IECLD 200 because sometimes a patient will suffer a heartattack or other acute medical event and become unconscious, withparamedics and physicians not being able to learn what medications ordevices are used by the patient. The knowledge of that information issometimes the difference between life and death for that particularpatient and the IECLD 200 will provide the life-saving information in atimely, inexpensive, and efficient manner.

When for instance, the communication between the IECLD 200 isestablished with the GPI server 10, the microprocessor is programmed toaccess the GPI database in the GPI server 10 after a conventional datastream is exchanged and connection established between the IECLD 200 andthe GPI central server 10 computer station. The IECLD 200 then obtainsany data on the drugs and products from the GPI server 10 computerrelated to the drugs and products which are then stored in the IECLD 200memory unit for the user. The data is then displayed on the display ofthe IECLD 40 with updating of the data and new data being stored in theIECLD 200 memory unit. If the new input data relates to drug “D” forinstance, which is given by the paramedics in the ambulance, the IECLD200 will send data informing the GPI server 10 station that a particularpatient Mr.XYZ was given the drug “D”, and the IECLD 200 is programmedto obtain from the GPI server 10 any information available on drug “D”or any information on interactions of drug “D” with biological variablesof patient Mr.XYZ. So if there is new data, the new data on drug “D”will be displayed in the display of the IECLD 200. If there is new dataencoded with harmful interaction code, then a special alarm will soundto inform the user of the harmful condition caused by the harmfulproduct being bought or prescribed or given. If a potentially harmfulproduct is identified and coded as harmful, the user is informed and ifthere is a recall or potentially harmful effect, then the variouspoints-of-sale carrying or selling the harmful product and doctorsprescribing the harmful product, which can be identified by the GPIserver 10, are contacted and an alert notice and information sent are tothe numerous places and professionals.

In the aforementioned Abreu patent, there is described a system in whichno numerical values are displayed in the display in relation toproviding output related to measured biological variables. Abreuutilizes a system of lights which corresponds to the range of values forthe biological variables. The portable unit IECLD 40 provides animprovement over Abreu's invention by providing an interactive displayin which the user can receive information and information on how toproceed according to the level of the biological variable measured. Forinstance when measuring eye pressure if the pressure is withinacceptable levels, the green light by Abreu would appear. In the presentinvention a message would appear stating that “You are fine” and “Youshould keep the appointment with Dr. Jones at 6 p.m. on January 1st.Please bring your glasses and medications with you”. Since there was arecord entered by the doctor that the patient did not bring his glasseswith him in the previous appointment, the IECLD 40 will remind thepatient of that. A list of the medications with its schedule wouldsubsequently appear on the screen indicating which should be the nextmedications to be taken and what is the dosage to be taken according tothe prescription by the doctor. The patient could then interrogate theIECLD 40 in regards to the meaning of the level of the pressure measuredand then receive information stored in the IECLD 40's memory in regardsto what that level of pressure means for that particular patientaccording to the patient's specific health status. If the pressuremeasured was within borderline values, the yellow light by Abreu wouldappear. In the present invention, a message would appear stating “Youreye pressure is borderline and you should check your eye pressure againin three hours. If you experience any eye pain please press the contactoffice button on your screen.” If the eye pressure measured is aboveacceptable levels, the red light by Abreu would appear. In the presentinvention, a message would appear stating “Your eye pressure is aboveacceptable limits. Please check your eye pressure again in 15 minutes.If you experience any eye pain or redness please press the contactoffice button on your screen.” If the pressure measured is very high,which could potentially cause irreversible damage in a short period oftime, the present invention would display a message stating “Please comeimmediately to the office for evaluation. Your pressure is well aboveacceptable safe limits.” A warning message about the patient's conditionwould also be transmitted to the medical provider's office over thepublic network. Each IECLD 40 is calibrated according to the range ofpressure which is considered safe for that particular patient andaccording to the overall health status of that patient. It is alsounderstood that the above disclosed technology could be applied to anyother home monitoring device such as blood sugar monitoring as describedby Abreu, blood pressure measuring devices, heart monitors, pregnancytests, and the like.

Another embodiment of the present invention relates to the transmissionof biological data acquired using diagnostic or monitoring tests asdescribed in the patents by Abreu or any diagnostic or monitoringdevice. The IECLD 40 interface with the various monitoring anddiagnostic devices via a low power RF or IR interfaces. The IECLD 40could be activated at prescribed intervals to store the biological datawhich was received from the other monitoring devices and to subsequentlydeliver the biological data over a public network such as the Internetand to a server 10 and then to a database. It is also understood thatthe IECLD 40 could be placed next to the monitoring device in order toreceive the biological data at the time of measuring the biologicaldata. The data could then be stored for later transmission or the datacould be immediately transmitted over the public network to thecorresponding database in the server 10.

The foregoing description of the preferred embodiments of the presentinvention have been provided for the purposes of illustration anddescription. Many modifications and variations will be apparent to thoseskilled in the art. The embodiments were chosen in order not to limitthe scope of the invention but to best explain the principles of theinvention and its practical applications.

I claim:
 1. A computer-implemented method of transferring informationbetween a user and a third party through a centralized computer,comprising the steps of: receiving, at the centralized computer, useridentification information including biometric data from a user; storingthe user identification information in a database; receiving, at thecentralized computer, user dynamically changing biometric informationtransmitted by the user from a remote location at different points intime, the biometric information being measured by health monitoringdevices; linking and storing the user dynamically changing biometricinformation in a user information database; comparing, by thecentralized computer, the user dynamically changing biometricinformation with normal values and notifying the user of a comparisonresult; reviewing, by the centralized computer, the user dynamicallychanging biometric information; transmitting, on an automated basis, inresponse to any abnormal variations to said user dynamically changingbiometric information and a stored health condition, an automatedmessage to said user; said database including a plurality of databases,said plurality of databases including at least one of a user database, aproduct database, a product information database, an interactiondatabase, a product usage database and a biological variables database;and electronically receiving said user biometric information from thehealth monitoring devices including at least one of blood glucose,temperature, eye pressure and blood pressure devices.
 2. The method asset forth in claim 1, further comprising a step of transmitting saiduser abnormal biometric information to a third party, the third partyincludes at least one of a doctor, a pharmacy, a laboratory, aninsurance company, hospital, and emergency medical services.
 3. Themethod as set forth in claim 1, wherein the biometric reading ispotentially harmful and said electronic message includes a warning andinstruction regarding the abnormal biometric readings.
 4. A computerizedinformation distribution system comprising: a remote terminal forreceiving user identification information and for registering a user; acentral server for storing biometric data corresponding to the user; acommunications network for receiving dynamically changing biometricinformation from a plurality of third party computers transmitted by theuser from a remote location at different points in time, the biometricinformation variables being measured by health monitoring devices; meansfor storing said dynamically changing biometric information at saidcentral server; means for generating a message corresponding to abnormalbiometric data; and means for transmitting said message to the user oversaid communications network; said remote terminal being an IECLDincluding a display, data entry means, memory means, processing meansand communication means.
 5. The system as set forth in claim 4, whereinthe data entry means includes at least one of a keypad, a keyboard and abar code scanner.
 6. The system as set forth in claim 4, wherein thecommunications means includes a modem.
 7. The system as set forth inclaim 4, wherein said means for storing is a plurality of databases. 8.The system as set forth in claim 4, wherein said plurality of databasesincludes at least one of a user database, a product database, a productinformation database, an interaction database, a product usage databaseand a biological variables database.
 9. The system as set forth in claim4, wherein the user is at least one of a doctor, a pharmacy, alaboratory and a patient.